公开记录良好
软件健康报告模式 0.27.0 · 指标 2.5.0 · 2026-07-29 00:57 UTC
bgpkit / bgpkit-parser
MRT/BGP data parser written in Rust.
bgpkit/bgpkit-parser 的健康指数为 100 分中的 78 分，处于「良好」区间。 其得分最高的类别是Vitality（85/100），最低的是Community & Adoption（53/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
78
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均，再依据公开记录的分布进行校准，使各等级具有百分位含义；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 34（存在风险）的上限。
78
卓越93-100公开记录中的最高层级（约前 5%）；基本满足所有检验标准
优秀80-92各方面均表现强劲；仅有少量不足
良好65-79健康；不足之处有限且可控
中等50-64可接受，但存在明显不足；建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节；采用时应保持审慎
危急1-19问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 67 经校准后在公布的指数量表上为 78（记录校准 2026-08-02）。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| crates.io | bgpkit-parser | 0.19.0 | 10,892 | 70 | 0 天前 | bgpbgpkitmrtnetwork-programming |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
85
开发活跃度
87优秀
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 22.8/36 | 提交节奏 — 52 周中有 33 周有提交 |
| 18/18 | 提交量 — 最近一年 283 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 283 |
| human_commit_share | 0.97 |
| days_since_last_push | 0 |
| active_weeks_last_year | 33 |
发布纪律
83优秀
评分方式
| 27/27 | 有发布版本 — 已发布 57 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 0 天前 |
| 19.8/27 | 发布节奏 — 约每 57.4 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 57 |
| latest_release_tag | v0.19.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 0 |
| mean_days_between_releases | 57.4 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
53
流行度与采用
47薄弱
评分方式
| 34.7/60 | 星标 — 138 个星标 |
| 9.3/25 | 复刻 — 14 个复刻 |
| 3.3/15 | 关注者 — 5 位关注者 |
所用输入
| forks | 14 |
| stars | 138 |
| watchers | 5 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| readme_badge_services | — |
| has_pull_request_template | 否 |
生态采用（下载量）
67良好
评分方式
| 53.8/80 | 月度下载量 — crates 合计每月 10,892 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | bgpkit-parser |
| dependents | — |
| ecosystems | crates |
| total_downloads | 159,292 |
| monthly_downloads | 10,892 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
64
维护者韧性（巴士系数）
28存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 2.7/22.5 | 提交分布 — 头号贡献者编写了 88% 的提交 |
| 6.8/13.5 | 贡献者广度 — 5 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 6 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 5 |
| top_contributor_share | 0.88 |
议题与 PR 响应能力
75良好
评分方式
| 39.1/42 | 议题解决 — 93% 的议题已关闭 |
| 26.5/30 | PR 接受 — 已裁定的 PR 中 168/190 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 1/13 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 168 |
| open_issues | 8 |
| closed_issues | 108 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.931 |
| closed_unmerged_prs | 22 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
已排除计分（无数据或不适用）：newcomer_pr_acceptance。 其余权重已重新归一化。
所有权与托管责任
66良好
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 15/25 | 所有者影响力 — bgpkit 有 121 位关注者 |
| 21.3/25 | 既往记录 — 37 个公开仓库，账户约 4 年 |
所用输入
| followers | 121 |
| owner_type | Organization |
| is_verified | — |
| owner_login | bgpkit |
| public_repos | 37 |
| account_age_days | 1,791 |
软件包维护
100卓越
评分方式
| 25/25 | 已发布且可解析 — crates 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 0 天前 |
| 20/20 | 版本历史 — 70 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | bgpkit-parser |
| ecosystems | crates |
| any_deprecated | 否 |
| min_days_since_publish | 0 |
工程质量
基础的工程与文档实践是否到位？
65
工程实践
68良好
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
60中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 4 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | bgp, rust, mrt, bmp |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
66
安全态势
57中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/13 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 5.7 |
依赖安全公告
100卓越
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 0/25 | 间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 1 |
| unassessed_packages | 43 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：间接依赖不含已知公告, 没有长期未处理的公告。 其余权重已重新归一化。 已将 1 个已解析依赖与 OSV 比对。 有 43 项无法评估——没有已解析的版本、生态系统不受支持，或超出所报告的软件包清单。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？权重刻意设小（4%）：代理工具链是一项真实的维护信号，但完全不具备的仓库仍可达到 100/100。
68
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — AGENTS.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 97 次人类提交中有 76 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.784 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 5,126 |
评分方式
| 12.6/18 | 一条命令的引导启动 — Cargo.toml, examples/local_only/Cargo.toml, examples/rib_entries_age_study/Cargo.toml（工具链约定，无任务运行器） |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — Rust（静态类型） |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 3 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | Cargo.toml, examples/local_only/Cargo.toml, examples/rib_entries_age_study/Cargo.toml, tests/fuzz/Cargo.toml |
| dependency_bot_commit_share | 0.03 |
面向模型的代码可读性
99卓越
评分方式
| 45/45 | 可类型检查的代码 — Rust（静态类型） |
| 54.1/55 | 可控的文件大小 — 采样的 174 个源文件中有 3 个超过 60KB |
所用输入
| primary_language | Rust |
| largest_source_bytes | 86,860 |
| source_files_sampled | 174 |
| oversized_source_files | 3 |
机器可读接口
40薄弱
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
138GitHub 星标
5贡献者
283最近 12 个月提交数
0距最近推送天数
57发布版本数
1巴士系数（bus factor）
8开放议题
crates.io软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- deps.dev does not index crates:bgpkit-parser@0.19.0; advisories assessed against the repository dependency graph instead
更多细节
Star 与 Fork 历史 0 ★ / 14 ⇿
0Star
14Fork
43发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 11修订 20
每个点涵盖 5 天。
OpenSSF Scorecard 5.7 / 10
5.7综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/13 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 17
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| crates.io | ipnet | 2.10 | Cargo.toml |
| crates.io | itertools | 0.15 | Cargo.toml |
| crates.io | log | 0.4 | Cargo.toml |
| crates.io | num_enum | 0.7 | Cargo.toml |
| crates.io | bitflags | 2.6 | Cargo.toml |
| crates.io | serde | 1.0 | Cargo.toml |
| crates.io | bytes | 1.7 | Cargo.toml |
| crates.io | zerocopy | 0.8 | Cargo.toml |
| crates.io | hex | 0.4.3 | Cargo.toml |
| crates.io | oneio | 0.24 | Cargo.toml |
| crates.io | regex | 1 | Cargo.toml |
| crates.io | chrono | 0.4.38 | Cargo.toml |
| crates.io | serde_json | 1.0 | Cargo.toml |
| crates.io | wasm-bindgen | 0.2 | Cargo.toml |
| crates.io | smallvec | 1.13 | Cargo.toml |
| crates.io | env_logger | 0.11 | Cargo.toml |
| crates.io | clap | 4.5 | Cargo.toml |
全部依赖 44
来自 GitHub 依赖图的完整解析依赖集合：17 个直接依赖与 27 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| crates.io | bitflags | — | 直接 |
| crates.io | bytes | — | 直接 |
| crates.io | chrono | — | 直接 |
| crates.io | clap | — | 直接 |
| crates.io | env_logger | — | 直接 |
| crates.io | hex | — | 直接 |
| crates.io | ipnet | — | 直接 |
| crates.io | itertools | — | 直接 |
| crates.io | log | — | 直接 |
| crates.io | num_enum | — | 直接 |
| crates.io | oneio | — | 直接 |
| crates.io | regex | — | 直接 |
| crates.io | serde | — | 直接 |
| crates.io | serde_json | — | 直接 |
| crates.io | smallvec | — | 直接 |
| crates.io | wasm-bindgen | — | 直接 |
| crates.io | zerocopy | — | 直接 |
| crates.io | anyhow | — | 间接 |
| crates.io | arbitrary | — | 间接 |
| crates.io | bgpkit-broker | — | 间接 |
| crates.io | bzip2 | — | 间接 |
| crates.io | criterion | — | 间接 |
| crates.io | crossbeam-channel | — | 间接 |
| crates.io | csv | — | 间接 |
| crates.io | ctrlc | — | 间接 |
| crates.io | flate2 | — | 间接 |
| crates.io | futures-util | — | 间接 |
| crates.io | indicatif | — | 间接 |
| crates.io | kafka | — | 间接 |
| crates.io | libfuzzer-sys | — | 间接 |
| crates.io | md5 | — | 间接 |
| crates.io | plotters | — | 间接 |
| crates.io | rayon | — | 间接 |
| crates.io | tempfile | — | 间接 |
| crates.io | tokio | — | 间接 |
| crates.io | tokio-tungstenite | — | 间接 |
| crates.io | tracing | — | 间接 |
| crates.io | tracing-subscriber | — | 间接 |
| crates.io | tungstenite | — | 间接 |
| crates.io | which | — | 间接 |
| npm | @bgpkit/parser | 0.18.0 | 间接 |
| npm | @bgpkit/parser | ^0.18.0 | 间接 |
| npm | kafkajs | ^2.2.4 | 间接 |
| npm | seek-bzip | ^2.0.0 | 间接 |
依赖安全公告 0
该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 1 个包，其中也包含从不交付的开发与测试版本固定：0 个存在已知公告，0 个为直接依赖。 有 43 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"bgp",
"rust",
"mrt",
"bmp"
],
"is_fork": false,
"size_kb": 2260,
"has_wiki": true,
"homepage": null,
"languages": {
"Rust": 1472420,
"Shell": 12802,
"JavaScript": 21815
},
"pushed_at": "2026-07-28T20:26:01Z",
"created_at": "2021-10-23T21:50:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T20:25:55Z",
"description": "MRT/BGP data parser written in Rust.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://bgpkit.com",
"name": "BGPKIT",
"type": "Organization",
"login": "bgpkit",
"company": null,
"location": "United States of America",
"followers": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/89942679?v=4",
"created_at": "2021-09-01T20:19:14Z",
"is_verified": null,
"public_repos": 37,
"account_age_days": 1791
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-07-28T20:31:14Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-07-02T17:50:56Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-05-24T18:31:21Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-04-08T05:04:49Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-01-29T03:56:25Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2025-12-23T03:56:56Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2025-12-08T04:40:09Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2025-10-17T19:47:28Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2025-06-06T17:00:59Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-02-26T19:35:57Z"
},
{
"tag": "v0.10.11",
"kind": "patch",
"published_at": "2024-10-27T15:25:51Z"
},
{
"tag": "v0.10.11-beta.1",
"kind": "prerelease",
"published_at": "2024-10-16T21:26:38Z"
},
{
"tag": "v0.10.10",
"kind": "patch",
"published_at": "2024-08-06T03:11:35Z"
},
{
"tag": "v0.10.9",
"kind": "patch",
"published_at": "2024-04-12T14:09:57Z"
},
{
"tag": "v0.10.8",
"kind": "patch",
"published_at": "2024-04-05T22:15:47Z"
},
{
"tag": "v0.10.7",
"kind": "patch",
"published_at": "2024-04-04T16:03:19Z"
},
{
"tag": "v0.10.6",
"kind": "patch",
"published_at": "2024-03-30T18:36:16Z"
},
{
"tag": "v0.10.5",
"kind": "patch",
"published_at": "2024-03-27T22:51:20Z"
},
{
"tag": "v0.10.4",
"kind": "patch",
"published_at": "2024-03-20T22:56:06Z"
},
{
"tag": "v0.10.3",
"kind": "patch",
"published_at": "2024-03-20T22:34:10Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2024-03-07T02:07:22Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2024-02-23T23:30:37Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2024-02-11T18:45:02Z"
},
{
"tag": "v0.10.0-beta.3",
"kind": "prerelease",
"published_at": "2024-02-08T16:29:30Z"
},
{
"tag": "v0.10.0-beta.2",
"kind": "prerelease",
"published_at": "2024-01-29T16:59:14Z"
},
{
"tag": "v0.10.0-beta.1",
"kind": "prerelease",
"published_at": "2024-01-03T23:42:26Z"
},
{
"tag": "v0.10.0-alpha.8",
"kind": "prerelease",
"published_at": "2023-12-06T20:01:22Z"
},
{
"tag": "v0.10.0-alpha.7",
"kind": "prerelease",
"published_at": "2023-11-14T21:54:05Z"
},
{
"tag": "v0.10.0-alpha.6",
"kind": "prerelease",
"published_at": "2023-11-14T16:26:31Z"
},
{
"tag": "v0.10.0-alpha.5",
"kind": "prerelease",
"published_at": "2023-10-31T20:54:43Z"
},
{
"tag": "v0.10.0-alpha.4",
"kind": "prerelease",
"published_at": "2023-10-29T23:29:20Z"
},
{
"tag": "v0.10.0-alpha.3",
"kind": "prerelease",
"published_at": "2023-10-23T22:56:13Z"
},
{
"tag": "v0.10.0-alpha.2",
"kind": "prerelease",
"published_at": "2023-09-17T21:54:12Z"
},
{
"tag": "v0.10.0-alpha.1",
"kind": "prerelease",
"published_at": "2023-08-06T18:36:46Z"
},
{
"tag": "v0.9.4",
"kind": "patch",
"published_at": "2023-05-02T18:02:24Z"
},
{
"tag": "v0.9.3",
"kind": "patch",
"published_at": "2023-04-23T20:06:30Z"
},
{
"tag": "v0.9.2",
"kind": "patch",
"published_at": "2023-04-11T22:32:02Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2023-03-31T04:51:17Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2023-03-31T04:49:11Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2022-08-10T17:43:26Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2022-08-07T00:35:33Z"
},
{
"tag": "v0.7.3",
"kind": "patch",
"published_at": "2022-05-11T04:02:06Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2022-01-30T16:08:05Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2022-01-14T14:15:52Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2022-01-03T01:47:42Z"
},
{
"tag": "v0.7.0-alpha.4",
"kind": "prerelease",
"published_at": "2021-12-26T01:46:51Z"
},
{
"tag": "v0.7.0-alpha.2",
"kind": "prerelease",
"published_at": "2021-12-19T05:01:45Z"
},
{
"tag": "v0.7.0-alpha.1",
"kind": "prerelease",
"published_at": "2021-12-16T18:37:54Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2021-12-04T17:38:24Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2021-11-13T00:43:35Z"
},
{
"tag": "v0.5.0-rc.2",
"kind": "prerelease",
"published_at": "2021-11-12T14:35:01Z"
},
{
"tag": "v0.5.0-rc.1",
"kind": "prerelease",
"published_at": "2021-11-11T05:01:02Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2021-11-09T20:09:01Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2021-11-01T01:39:00Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2021-10-25T16:40:43Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2021-10-25T05:56:14Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2021-10-23T21:59:49Z"
}
],
"recent_commits": [
{
"oid": "b48c33d1e6b5e129f850894a8de6fecc397d3aef",
"body": "The WASM package.json version was not updated during release prep,\ncausing npm publish to fail with 'cannot publish over previously\npublished version 0.18.0'.",
"is_bot": false,
"headline": "fix(wasm): bump npm package version to 0.19.0",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T20:25:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac8d940a1acea2bf23a919d08302cfcff8baf147",
"body": "ci: consolidate audit workflows and gate release on tests",
"is_bot": false,
"headline": "Merge pull request #311 from bgpkit/ci/audit-and-release-gate",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T19:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f72637508b3c0cd83d5488550d796556ec00a16b",
"body": "Library crates don't commit Cargo.lock (it's in .gitignore). Both the\naudit workflow and the release security-audit job need to generate a\nlockfile before running cargo audit, otherwise they fail with 'could\nnot find Cargo.lock'.",
"is_bot": false,
"headline": "fix(ci): generate Cargo.lock before cargo audit",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T19:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c50e5a491f67a34697facd5946c3a4bd218c6d1",
"body": "- Replace deprecated actions-rs/audit-check@v1 (archived) with\n rustsec/rustsec-action@v2 in a single consolidated audit.yml,\n merging the on-change and scheduled triggers.\n- Add release-test job as the first gate in release.yml: runs full\n test suite (--all-features) before format check, audit, or publish.\n- Add --locked to cargo install commands (cargo-readme, cargo-audit,\n wasm-pack) so breaking releases of those tools can't block publishing.",
"is_bot": false,
"headline": "ci: consolidate audit workflows and gate release on tests",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T19:36:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d657488a19f2d3d3501af0d6a3d3468329f9af4e",
"body": "Enable oneio's zstd feature so .zst-suffixed MRT files are transparently\ndecompressed on read and compressed on write. Verified end-to-end: parsed\n8160 elements from a .zst-compressed update file, and round-tripped\nthrough MrtRibEncoder → write .zst → re-parse.",
"is_bot": false,
"headline": "feat: add zstd compression support via oneio zstd feature",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T19:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acdb35d1831f642b02245bcfa5da3e602aa173e5",
"body": "- bump version to 0.19.0\n- date CHANGELOG (Unreleased → v0.19.0 - 2026-07-28)\n- restructure changelog: move #[non_exhaustive] to Breaking changes,\n move raw-bytes fix from Added to Fixed, add oneio 0.24 dependency bump\n- update filter documentation in add_filter rustdoc, lib.rs README source,\n and filters example to cover the 9 new filter types and presence wildcard\n- regenerate README.md via cargo readme",
"is_bot": false,
"headline": "chore(release): prepare v0.19.0",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T18:53:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "646cd4fdcd165d84f95e1d05a84aa44eaa212a2e",
"body": null,
"is_bot": false,
"headline": "Merge pull request #309 from bgpkit/feat/rfc7606-error-handling",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T03:39:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "537de3f86f0636058a1bf2b976d461f04550af8e",
"body": "- is_announcement/has_standard_nlri now based on wire-level NLRI byte\n presence (announced_bytes_present) rather than parse success. A malformed\n announced NLRI section still triggers mandatory-attribute validation\n (ORIGIN/AS_PATH/NEXT_HOP) because the UPDATE clearly intended to announce.\n- pars\n[…]\ne duplication that\n could diverge from RawMrtRecord::raw_bytes().\n- Added test: malformed NLRI with missing mandatory attrs still produces\n both MalformedNlri and MissingWellKnownAttribute warnings.",
"is_bot": false,
"headline": "fix: address round-3 Copilot review comments on PR #309",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-28T03:28:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "462faf6cb1018eb337a51948c867d30e6f017393",
"body": "Copilot correctly identified that a 1-byte NLRI with value 0x00 encodes\nthe default route (prefix length 0, no prefix octets) — a valid encoding.\nThe previous blanket rejection of all 1-byte NLRI would have incorrectly\ndropped valid 0.0.0.0/0 announcements.\n\nNow only 1-byte NLRI with a non-zero value is treated as malformed.\nAdded test for both cases: invalid (0xFF) and valid default route (0x00).",
"is_bot": false,
"headline": "fix: don't reject valid default-route 1-byte NLRI (0x00 = 0.0.0.0/0)",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T22:16:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b0efaed95e4b4390b2b250f1035574f281bdf49",
"body": "- read_nlri: 1-byte NLRI field now returns Err instead of silently\n returning Ok(vec![]), so MalformedNlri warnings are correctly emitted\n for this edge case (both withdrawn and announced sections).\n- parse_mrt_record: build raw bytes Vec directly from header_bytes +\n message_bytes instead of going through raw_bytes() → to_vec(), avoiding\n an unnecessary intermediate Bytes allocation on the error path.\n- Added regression test for the 1-byte NLRI case.",
"is_bot": false,
"headline": "fix: address Copilot review comments on PR #309",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T21:48:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89bd6f3cf36c2c1f5212bdaa5d609df60940d6bf",
"body": "- Classify each validation warning into Notification / Treat-as-withdrawal /\n Attribute discard tiers following the Junos bgp-error-tolerance per-attribute\n mapping table.\n- Apply the 'most severe wins' rule when multiple attributes are malformed\n in a single UPDATE.\n- Show the router action (session reset, routes withdrawn, attribute discarded)\n for each finding.",
"is_bot": false,
"headline": "enhance: treat-as-withdrawal example with Junos three-tier error model",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T21:43:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30904242eb7d41733d937e19dcdc94f40e99c7ac",
"body": "- Malformed NLRI (withdrawn or announced) no longer causes the entire\n BGP UPDATE to be discarded. The parser returns partial data with a\n BgpValidationWarning::MalformedNlri containing the raw NLRI bytes.\n- parse_mrt_record now preserves raw MRT record bytes in\n ParserErrorWithBytes when the mes\n[…]\ndiscard vs treat-as-withdrawal).\n- Added 12 fixture tests covering malformed NLRI recovery, raw byte\n preservation, the Qrator OTC incident scenario, and treat-as-withdrawal\n emulation.\n\nCloses #303",
"is_bot": false,
"headline": "feat: RFC 7606 non-fatal NLRI parsing and treat-as-withdrawal support",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T20:48:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "130b82e8466f36432e7aabb49c0424346d06e8fc",
"body": null,
"is_bot": false,
"headline": "docs: add changelog entries for PR #308 security fixes",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T19:19:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a283113e3215390eecfcae09425f685878a080b5",
"body": "Security/rtr oob and dos fixes",
"is_bot": false,
"headline": "Merge pull request #308 from ties/security/rtr-oob-and-dos-fixes",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T19:17:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58ec347c72fc6db3d3be318afe43d11a130d1e07",
"body": null,
"is_bot": false,
"headline": "Feedback about Link-State AFI in BGP4MP envelopes",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-07-27T19:10:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b51b6472452dfaf6eca30fe661758ae68aca61a",
"body": "…e PDU cap for Error Reports\n\n- Compare wire-controlled lengths by subtraction instead of addition in the\n ErrorReport encap/text bounds checks, so they cannot overflow usize on\n 32-bit targets; saturate the reported 'expected' value instead of\n truncating it.\n- Cap read_rtr_pdu allocations at RT\n[…]\nopy of a maximum-size PDU plus diagnostic\n text can legitimately exceed the 65,535-octet non-error PDU maximum.\n- Add a regression test for a >64 KiB but valid Error Report.\n\nAssisted-by: Claude Code",
"is_bot": false,
"headline": "fix(security): harden RTR bounds checks against 32-bit overflow, rais…",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-07-27T18:46:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5c17743fd7f1d21de3ac0f941596f98a5f450b1c",
"body": "build(deps): update oneio requirement from 0.23 to 0.24",
"is_bot": false,
"headline": "Merge pull request #305 from bgpkit/dependabot/cargo/oneio-0.24",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T18:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a917dad489f0af9ac3e6bf853d6e19b1b961d78",
"body": "feat: add filters for remaining BgpElem fields",
"is_bot": false,
"headline": "Merge pull request #307 from bgpkit/feat/extended-filters",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T18:37:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32d7f55bfd5f910d7eb419823f76a7d4c4e39b4d",
"body": "Address Copilot review comments:\n- Non-negated elem-only filters (e.g. atomic=false) were incorrectly\n matching BgpRouteElem because the default trait accessors return\n false/None. Now all elem-only filters (direct and negated) fail-closed\n on route-level views.\n- Fix doc comments: !otc=* → otc=!* (negation is on the value)\n- Fix is_elem_only_filter doc: fail-closed for both negated and non-negated\n- Add regression tests for atomic filter on route elems",
"is_bot": false,
"headline": "fix: fail-closed for all elem-only filters on route views",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T18:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61d80b804a04b1207bd981dbc7128ab6c27634e8",
"body": "Covers both parse_rtr_pdu (slice-based) and read_rtr_pdu (reader-based)\nso the OOB-slice and unbounded-allocation classes fixed in the prior\ncommit are exercised in CI. RTR was previously the only parser without\na fuzz target.\n\nAssisted-by: Claude Code",
"is_bot": false,
"headline": "test(fuzz): add fuzz_rtr target for RPKI RTR PDU parsing",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-07-27T18:22:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb95dbdf777591c9255451212098d0a0754f7343",
"body": "Security review focused on out-of-bounds reads in the TLV-based\nprotocol parsers surfaced several issues, fixed here:\n\n- rtr: validate error_text_len against the PDU before slicing in\n ErrorReport parsing (was a confirmed OOB slice panic reachable from\n a malicious/compromised RTR cache).\n- rtr: r\n[…]\n.\n- utils: check has_n_remaining before Vec::with_capacity in read_asns\n and use checked_mul to avoid 32-bit overflow.\n\nAdds regression tests for the RTR and flowspec fixes.\n\nAssisted-by: Claude Code",
"is_bot": false,
"headline": "fix(security): guard OOB reads and DoS in TLV parsers",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-07-27T18:20:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3b65bd4598ac5d886ae5aa034e96d48e6ca93af",
"body": "Add Filter variants for nine previously unfilterable BgpElem fields:\nonly_to_customer (otc), next_hop, origin, local_pref, med, atomic,\naggr_asn, aggr_ip, and peer_bgp_id.\n\nEach optional field supports presence filtering via the * wildcard:\n- field=* matches elements where the field is present (Some\n[…]\nent value)\n\nAll new variants are BgpElem-only. The existing community filter's\nfail-closed pattern is generalized via is_elem_only_filter() to cover\nall elem-only filters on BgpRouteElem.\n\nCloses #306",
"is_bot": false,
"headline": "feat: add filters for remaining BgpElem fields",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-27T18:19:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0af056d4107272b20f9f33c7ba97c6f7b9ace3b7",
"body": "Updates the requirements on [oneio](https://github.com/bgpkit/oneio) to permit the latest version.\n- [Release notes](https://github.com/bgpkit/oneio/releases)\n- [Changelog](https://github.com/bgpkit/oneio/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/bgpkit/oneio/compare/v0.23.0...v0.24.2)\n\n---\nupdated-dependencies:\n- dependency-name: oneio\n dependency-version: 0.24.2\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): update oneio requirement from 0.23 to 0.24",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-27T12:13:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f3aa3f8e646640d89a6fe11501afe59a1edb10b",
"body": null,
"is_bot": false,
"headline": "fix: resolve strict clippy warnings",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-13T16:01:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70dfcebe9cff619fee6aefe47342312e4f1d330c",
"body": null,
"is_bot": false,
"headline": "docs: complete examples index and instructions",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-13T16:01:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58d47b723309f230bbffb42d49279246ed0890ee",
"body": null,
"is_bot": false,
"headline": "feat: add MRT attribute code counting example",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-13T16:01:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c41f88d4482726ca248a1abe1f354101e73361d8",
"body": "build(deps): update tungstenite requirement from 0.29.0 to 0.30.0",
"is_bot": false,
"headline": "Merge pull request #298 from bgpkit/dependabot/cargo/tungstenite-0.30.0",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-13T15:40:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a45cc0b4f84ec418124ebffed45471a656feb5f",
"body": "Updates the requirements on [tungstenite](https://github.com/snapview/tungstenite-rs) to permit the latest version.\n- [Changelog](https://github.com/snapview/tungstenite-rs/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/snapview/tungstenite-rs/compare/v0.29.0...v0.30.0)\n\n---\nupdated-dependencies:\n- dependency-name: tungstenite\n dependency-version: 0.30.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): update tungstenite requirement from 0.29.0 to 0.30.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T12:13:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c39e39037ccf44de2848e9f48ba82d418d745743",
"body": null,
"is_bot": false,
"headline": "ci: run cargo audit directly in release workflow",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T17:46:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74285c64a6bfab7375eee77526b084c8c79411ef",
"body": null,
"is_bot": false,
"headline": "chore: prepare v0.18.0 release",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T17:39:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aad73d96e4a71b88356692fda006ac0cc3c33ec3",
"body": "feat: add RIS Live raw message parsing",
"is_bot": false,
"headline": "Merge pull request #296 from bgpkit/rislive-raw-parsing",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T17:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f40b72c116ed0ad70ce78bd2f532b60996fdb7",
"body": null,
"is_bot": false,
"headline": "feat: re-export RIS Live socket options",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T17:12:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a22889b1f1564193879e3c984b54d12d8c22139c",
"body": null,
"is_bot": false,
"headline": "docs: clarify RIS Live raw parser contract",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T17:10:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae3cda5b8468b2da7e9f26afdc49b5541c1ada12",
"body": null,
"is_bot": false,
"headline": "test: cover RIS Live raw parsing errors",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T17:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c07daf8068d123f90f3dc5ceff22fd4f4e279610",
"body": null,
"is_bot": false,
"headline": "feat: add RIS Live raw message parsing",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-07-02T16:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "063a74397fe52215a5bd3050a357b22b7ac62596",
"body": "build(deps): update itertools requirement from 0.14 to 0.15",
"is_bot": false,
"headline": "Merge pull request #293 from bgpkit/dependabot/cargo/itertools-0.15",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-22T16:23:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ba025f1bdc11d60066cda69209557dd4f2494a1",
"body": "Updates the requirements on [itertools](https://github.com/rust-itertools/itertools) to permit the latest version.\n- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/rust-itertools/itertools/compare/v0.14.0...v0.15.0)\n\n---\nupdated-dependencies:\n- dependency-name: itertools\n dependency-version: 0.15.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): update itertools requirement from 0.14 to 0.15",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T12:13:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a9224664c1236ed65672d289e901b6bb8ef9dc3",
"body": "…aigp\n\nfeat: retain raw BGP attributes, add AIGP/BFD/Prefix-SID/BIER/SFP parsers",
"is_bot": false,
"headline": "Merge pull request #291 from bgpkit/feat/bgp-attribute-raw-retention-…",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:38:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a29f9bfd0be4a925f270cf7b221029e530e71897",
"body": "- AIGP: test length<3 rejection, truncated value rejection, encode length correction\n- BFD Discriminator: test truncated optional TLV header error path\n- models: test attr_category() for BfdDiscriminator, BgpPrefixSid, Bier, Sfp",
"is_bot": false,
"headline": "test: add tests for coverage gaps in AIGP/BFD parsers and attr_category",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:35:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5949c9c1023821baf28c9dc5068ecee157f71d38",
"body": null,
"is_bot": false,
"headline": "docs: add codecov coverage inspection instructions and helper script",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f385bebebc4bb5d885d6e3041845a7805bec034",
"body": "- Merge AttributeValue::Raw into Unknown arm in get_relevant_attributes\n so raw-retained codes (0,22,24,27,33,128) appear in elem.unknown\n- Fix scan_path_attributes.rs comments and add date update note\n- Add doc comment to AttrRaw::attr_type() explaining Raw vs Unknown\n- Replace Bytes::from(v.to_owned()) with Bytes::copy_from_slice(v)\n- Replace blanket #[allow(unused_imports)] with precise #[cfg] gating",
"is_bot": false,
"headline": "fix: surface Raw attributes in MrtElem, fix imports, and improve docs",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7edd2e202c6fb73f8a1d8ac173f38c8e5f023b69",
"body": null,
"is_bot": false,
"headline": "chore: suppress unused Afi import warning with scoped allow attr",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66227123c3a6aceadbc2e5839d23287b62c44255",
"body": null,
"is_bot": false,
"headline": "chore: fix unused Afi import warning on no-default-features builds",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ceff8de307e97d8db9189fbafbea995c069e66a4",
"body": "….toml bytes fix",
"is_bot": false,
"headline": "feat: add SFP/BFD/Prefix-SID/BIER parsers, examples, changelog, Cargo…",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T03:13:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27b1fbfc39b72a9df1930805c9bc2d45db670b8e",
"body": null,
"is_bot": false,
"headline": "feat: retain raw BGP attributes and add AIGP parser",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-06-16T01:25:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9889d1e7fc35e017d08e3a3b3cbda8fabc80914",
"body": "- Route-level parser (BgpRouteElem, into_route_iter) for fast scans\n- MPLS Labeled NLRI support (RFC 3107/8277)\n- AS Path SmallVec memory optimization\n- RFC 4760 conditional mandatory attribute validation\n- BMP RFCs 9515, 9736, 9972 support\n- Dependency bumps: oneio 0.21→0.23, tokio-tungstenite 0.28→0.29",
"is_bot": false,
"headline": "release: prepare v0.17.0",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-24T18:27:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cfc402374cef2a383998c48d30e75f02d86db26",
"body": null,
"is_bot": false,
"headline": "chore: bump oneio to 0.23 and tokio-tungstenite to 0.29",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-24T18:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e460f46e1f03e3502456587bb1d6d201a1bfef5",
"body": "feat: add support for BMP RFCs 9515, 9736, and 9972",
"is_bot": false,
"headline": "Merge pull request #286 from bgpkit/feature/bmp-rfcs-9515-9736-9972",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-24T18:07:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b979170e6c92981cb8704536b287f50967c68fa",
"body": null,
"is_bot": false,
"headline": "docs: add pre-push checks and cargo-readme guidelines to AGENTS.md",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-24T18:06:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e5c36bd1e442151139b368987d652db3173b6f",
"body": "- RFC 9515: administrative registration procedures update (docs only)\n- RFC 9736: separate Peer Up TLV namespace from Initiation TLVs; switch\nto FromPrimitive with catch-all for forward compatibility\n- RFC 9972: add 26 new StatType variants for Adj-RIB-In/Adj-RIB-Out\nmonitoring statistics",
"is_bot": false,
"headline": "feat: add support for BMP RFCs 9515, 9736, and 9972",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-24T18:02:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e75811ba87abecdee9dfd426445889521215903",
"body": "add minimal route-level parser",
"is_bot": false,
"headline": "Merge pull request #284 from ties/feature/minimal-update-level-parser",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-11T13:30:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b09772303c17a5f3b34138907fb1dc4d997cf5a7",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG.md with route-level parser changes",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-09T23:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d21e8884e7b3036625db2d290d5209b3be98cdc",
"body": null,
"is_bot": false,
"headline": "Trait parity between BgpElem and BgpRouteElem",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-09T20:38:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac97c9e24b27712d225891faf0b6c53bc0efbe97",
"body": " * Shared AS-path, since we can still change the public API at the\n moment.\n * Introduce RouteUpdateIter to prevent materialisin routes.\n * Lookup peer by index/more dense.\n\nSpeedup seems to be ±10%.\nBenchmark setup (Macbook Air M4):\n\n- before: 5d9337c (532b05b^)\n- after: 532b05b\n- input: /tmp\n[…]\ne full file\n- routes parsed each run: 56,051,677\n\nResults:\n\n| revision | runs, seconds | median |\n|---|---:|---:|\n| before | 10.943, 10.813, 10.881 | 10.881s |\n| after | 9.749, 9.766, 9.835 | 9.766s |",
"is_bot": false,
"headline": "Small optimisations, main one is shared as-path",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-09T14:25:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d9337c9bf017fb0aeb8a33dc2d58a7ef10a0532",
"body": null,
"is_bot": false,
"headline": "Add route-level parsing example",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-09T00:24:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f780167e4f73dfca3037eb53634f6f1c0e656dde",
"body": "- Move write_mrt_core_dump helpers to iters/mod.rs to avoid duplication\n- Remove redundant data.has_n_remaining() check after explicit length guard\n- Add default match_filters to Filterable trait; remove identical overrides",
"is_bot": false,
"headline": "Address review feedback for route iterator",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-05-09T00:16:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55de7f16fa7496115d86ac760ce7d5f7846c914c",
"body": null,
"is_bot": false,
"headline": "return valid rib entries before RIB entry with misaligned attributes",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-08T17:07:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63a8f41ceb0818027f5dd217a518b9ec644ffe37",
"body": null,
"is_bot": false,
"headline": "share addpath length calculation",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-08T13:02:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdde70d8eff98451b0a8697a4d88c5629d886f92",
"body": null,
"is_bot": false,
"headline": "Incorporate review feedback",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-08T12:44:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fc105882d756be72409dabf6d504bb1177efd2a",
"body": null,
"is_bot": false,
"headline": "Add route iterator test cases",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-08T08:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "041453ce0e62ecb6d6f602b771368037ee5c99e7",
"body": null,
"is_bot": false,
"headline": "share route-level filter matching between BgpElem and BgpRouteElem",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-07T22:10:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c203300467c3fb87d5489aa3e81446826145ec41",
"body": null,
"is_bot": false,
"headline": "Fix documentation compile error",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-07T06:28:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c505b2b1ca909e24aa9bbccf51a53e99a3a1c944",
"body": "Add a parser that parses the basic information for a route (prefix,\nas_path, peer_ip, peer_as). The validation logic is shared with the regular\nelement level iterator.\n\nOn the update fixture, `into_route_iter` takes ~1.83 ms versus\n~2.09 ms for `into_update_iter`, about 12% faster.\n\nOn the small RIB fixture, `into_route_iter` takes ~24.2 ms versus\n~60.0 ms for `into_update_iter`, about 60% faster / 2.5x as fast.",
"is_bot": false,
"headline": "add minimal route-level",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-05-06T22:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfb960f771f40498a95a44750de73683229444c5",
"body": null,
"is_bot": false,
"headline": "Add RFC 8277 to supported RFCs list",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-22T16:25:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3681fef8ce9d0c6b9a67a7e85f65ee31e1f7aac8",
"body": "CHANGELOG improvements:\n- Add migration guidance for Nlri struct breaking change\n- Clarify RFC 8277 obsoletes RFC 3107\n- Note LabeledNlriConfig default is MultiLabel\n- Clarify labeled_prefixes is on Nlri inner struct\n\nExample improvements:\n- Remove stale debug comment\n- Soften label-position interpretation to note deployment-specific semantics",
"is_bot": false,
"headline": "Improve documentation per MAGI review feedback",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-22T14:23:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd08eb8c27ad56295be7db36aad6118cc62b26f5",
"body": "Fixes based on multi-agent review:\n\n- MPLS encoder: Fixed duplicate title line in doc comment\n- MPLS mode: Changed default from SingleLabel to MultiLabel to match parser behavior\n- MPLS ADD-PATH: Improved error handling in encode_nlri with proper Result return type\n- MPLS encoder: Infer ADD-PATH from path_id presence in labeled prefixes\n- Documentation: Added parse_bmp_mpls.rs example to CHANGELOG",
"is_bot": false,
"headline": "Address MAGI review feedback for MPLS and SmallVec implementation",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-22T14:18:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b76fe05f8d561d9f2207e8b34c42a92ca2661b7",
"body": "Tool for analyzing RIB dumps to gather statistics for\nSmallVec sizing decisions.",
"is_bot": false,
"headline": "Add RIB analysis example",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-21T21:09:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4046f1062f3755d5f682a7fa3c50af89bc3a0ad5",
"body": "Implements parsing and encoding for BGP MPLS Labeled NLRI:\n\n- New mpls module with MplsLabel, LabeledNetworkPrefix types\n- Support for SAFI 4 (MplsLabel) in AFI/SAFI enums\n- SingleLabel and MultiLabel parsing modes per RFC 8277\n- Labeled NLRI parsing wired into MP_REACH/MP_UNREACH attributes\n- Withd\n[…]\nty field handling\n- Encoder for labeled prefixes with ADD-PATH support\n- Error variants for labeled NLRI-specific failures\n\nBreaking change: Nlri struct has new labeled_prefixes field for MPLS routes.",
"is_bot": false,
"headline": "Add MPLS Labeled NLRI support (RFC 3107/8277)",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-21T21:06:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6c69da7b6fdb81978662430b1962b502298e8bd4",
"body": "Use SmallVec for inline storage to avoid heap allocations in common cases:\n\n- AsPath::segments: SmallVec<[AsPathSegment; 1]>\n 99.99% of routes have exactly 1 segment (zero-allocation coverage)\n\n- AsPathSegment variants: SmallVec<[Asn; 6]>\n 90.85% of segments have <=6 ASNs (zero-allocation coverage)\n\nBased on RIB analysis of 200K records from route-views2 (3.29M segments).\n\nAlso fixes a pre-existing clippy warning in rislive messages.",
"is_bot": false,
"headline": "Optimize AS Path storage with SmallVec for reduced allocations",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-21T21:06:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a925d03e778ed6be14320893088dda28ba3df2ba",
"body": "fix: implement conditional mandatory BGP attribute validation",
"is_bot": false,
"headline": "Merge pull request #281 from ties/feature/mandatory-attribute-checks",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-15T21:29:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6679abf18234b2e3c11ba988e08d46a111287124",
"body": "…ning\n\nFixes build failure caused by missing attr_mask field in the serde\nDeserialize implementation for Attributes. The mask is now computed\nfrom the deserialized inner attribute vector.\n\nAlso collapses nested if statements to address clippy warning.\n\nChanges:\n- src/models/bgp/attributes/mod.rs: Fix Deserialize impl and clippy\n- CHANGELOG.md: Document RFC 4760 validation changes",
"is_bot": false,
"headline": "fix: add missing attr_mask in Deserialize impl and address clippy war…",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-15T21:26:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e17f555165989026804ffae6b610975214fb84e",
"body": null,
"is_bot": false,
"headline": "elaborate on implication",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-04-15T18:45:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fee64c548a347f725ca4cf7ada047d10aff89de9",
"body": null,
"is_bot": false,
"headline": "Comprehensive validation of attribute presence",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-04-15T18:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "711e7414f78a66e03f007d8170a4c3e60baa5adb",
"body": null,
"is_bot": false,
"headline": "Move up attribute verification",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-04-15T18:34:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "947c2f9e8fb200276c83ebe7cb56f06e0cb110fb",
"body": null,
"is_bot": false,
"headline": "explain inferring it's an announcement",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-04-15T17:51:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a70e30506bc04ac85d3ac6059206ace91b8dcd7",
"body": "Update attribute verification to follow RFC 4760 (MP-BGP) rules where mandatory\nattributes depend on the message payload.\n\n - pure withdrawal (withdrawn routes or MP_UNREACH_NLRI) -> none.\n - ORIGIN + AS_PATH for announcements\n - NEXT_HOP: conditional. IPv4 NLRI present -> required, IPv4 NLRI not\n - present -> should be omitted.\n\nOptimisation: the [bool; 256] tracking array is now a [u64; 4] bitmask.",
"is_bot": false,
"headline": "fix: implement conditional mandatory BGP attribute validation",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-04-15T17:33:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "632bbe7e865d9a53f050ea278d2c7e351d697b5a",
"body": "…ages in example\n\nWhen a consumer group has no stored offsets, FetchOffset::Earliest causes\nthe consumer to start from the beginning of the Kafka retention window,\nwhich on a production RouteViews stream can be days of historical messages.\nThose old BMP messages have old per-peer timestamps too, cau\n[…]\n after the previous fix.\n\nChanging to FetchOffset::Latest starts the consumer from the newest available\nmessages when no offset is stored, which is the correct behavior for live streaming.\n\nFixes #279",
"is_bot": false,
"headline": "fix: use FetchOffset::Latest to avoid replaying historical Kafka mess…",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-14T18:54:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a0e94303f3fc7c1086c44242aa9a7f61df2ab7a",
"body": "…n example\n\nThe real_time_routeviews_kafka_openbmp.rs example was using\n`header.timestamp` (OpenBMP collector timestamp) when creating BgpElem\nfrom BMP messages. This caused timestamp drift when the collector had\nprocessing delays or when historical data was replayed.\n\nChanged to use `per_peer_header.timestamp` (BMP per-peer header timestamp)\nwhich represents the actual BGP event time. Falls back to OpenBMP\ntimestamp only when per-peer timestamp is unavailable (0.0).\n\nFixes #279",
"is_bot": false,
"headline": "fix: use BMP per-peer timestamp instead of OpenBMP header timestamp i…",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-14T03:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c964c6998282acc52ae6f62ac34d1390b2dc3481",
"body": null,
"is_bot": false,
"headline": "prepare v0.16.0",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T05:00:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "606a2617b792f91f62cd322689e2d635b45dbaaa",
"body": "Memory usage optimizations - 61% reduction",
"is_bot": false,
"headline": "Merge pull request #278 from bgpkit/dev/memory-optimizations",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T04:25:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f8ad2fc6247a085ab2cf528334ef30271aa72c1",
"body": "Implement Option C from simplify agent review:\n- Make try_parse_prefix the primary implementation (speculative parsing)\n- Make read_nlri_prefix a thin wrapper (just calls try_parse_prefix + advance)\n- Eliminates ~68 lines of duplicated code\n- Maintains 61% memory reduction (2,032 MB → 784 MB)\n- All 565 tests pass\n\nBenefits:\n- Single source of truth for prefix parsing logic\n- No code duplication\n- Cleaner architecture\n- Same performance gains",
"is_bot": false,
"headline": "Refactor NLRI parsing to eliminate code duplication",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T04:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3f52ad3321e83a20b33e9c46916b6bb97113f47",
"body": "Optimizations:\n- NLRI Add-Path clone-free parsing: Use speculative parsing from byte slices\n instead of cloning entire input buffer. Parses without consuming, only\n advances Bytes after successful parse. Saves ~1.2GB (61%) peak memory.\n- Attribute vector pre-allocation: Estimate capacity from data\n[…]\n:\n- Peak memory reduced by 60.6% (2,049 MB → 808 MB)\n- Tested with RouteViews LINX RIB (151MB compressed)\n- Added 7 new test cases for NLRI parsing edge cases\n\nNo breaking changes. All 565 tests pass.",
"is_bot": false,
"headline": "Add memory usage optimizations with clone-free NLRI parsing",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T04:06:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd11e4e69c7fbc333c234b717d60c746553d9703",
"body": "Add security validation and RFC compliance fixes",
"is_bot": false,
"headline": "Merge pull request #277 from bgpkit/dev/sec-improvements",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T03:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e2ff7cd803dd47da36f2940b2c0697b1b86e2a8",
"body": null,
"is_bot": false,
"headline": "Add security improvements to CHANGELOG",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T03:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c514799adc82c6024eeb8b8838601ad74165889",
"body": "Security fixes:\n- AS_PATH segment count validation to prevent buffer over-read\n- BGP message length underflow protection with saturating arithmetic\n- NLRI prefix length validation (max 32 for IPv4, 128 for IPv6)\n- BGP marker encoding fix per RFC 4271 (16 bytes of 0xFF)\n- BGP marker validation on par\n[…]\n\n- RFC 7606 error handling (PARTIAL flag, treat-as-withdraw)\n- RFC 4760 NEXT_HOP/MP_REACH_NLRI interaction\n- Document NLRI parsing heuristics\n\nTests: Add 18 new tests covering security vulnerabilities",
"is_bot": false,
"headline": "Add security validation and RFC compliance fixes",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-08T03:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fde6232907e8365f2d4626641290089f67ee2f6b",
"body": "Add with_filters and add_filters methods",
"is_bot": false,
"headline": "Merge pull request #275 from bgpkit/dev/with_filters",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-04T13:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4abd4dad5b5dc9604459eff3b5bfae45aa3c0fd",
"body": "Update dependencies: oneio 0.21 and bgpkit-broker 0.11",
"is_bot": false,
"headline": "Merge pull request #276 from bgpkit/dev/update-deps",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-04T13:57:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc989db347ca989dcae992fdcdf6eaae8e294bc2",
"body": "Updated oneio from 0.20.0 to 0.21:\n\n- Fixed breaking change: download() no longer accepts Option<Client> parameter\n\n- Updated example and bench code to use new signature\n\nUpdated bgpkit-broker from 0.10.1 to 0.11\n\nBoth dependencies updated to their latest compatible versions.",
"is_bot": false,
"headline": "Update dependencies: oneio 0.21 and bgpkit-broker 0.11",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-04T13:52:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb49c789afd8c33836592a73eac750b5dd295238",
"body": "- Updated with_filters signature from Vec<Filter> to &[Filter]\n\n- Added code example demonstrating filter reuse\n\n- Added note about codecov configuration fix",
"is_bot": false,
"headline": "Update CHANGELOG with with_filters/add_filters details",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-04T13:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d6694ca679e91d517c883fa7e7dcefa113ed60",
"body": "This addresses issue #271 by allowing users to pass pre-built Vec<Filter> directly to the parser.\n\nChanges:\n- Add with_filters(Vec<Filter>) to set filters directly\n- Add add_filters(&[Filter]) to extend existing filters\n- Add rust docs to add_filter with filter type descriptions\n- Add 5 tests for the new filter methods",
"is_bot": false,
"headline": "Add with_filters and add_filters methods to BgpkitParser",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-04-04T13:45:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a16a5431802b3f1f6af554ca946fe32208e28704",
"body": "Add context to bgpkit warning messages",
"is_bot": false,
"headline": "Merge pull request #274 from ties/feature/context-to-warn-messages",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-31T21:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2acfdb86b5a5c52017ad2c997ab697d9e44b9cb",
"body": null,
"is_bot": false,
"headline": "Apply cargo fmt formatting fixes and make coverage checks informational",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-31T21:03:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272edd0ad9b8af4f725c941d7184c7001ced34d7",
"body": null,
"is_bot": false,
"headline": "Use record names from RFCs",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-03-31T19:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3fdac7fd132e396ca56633b45007b542ca990b9",
"body": null,
"is_bot": false,
"headline": "Fix messages on correct path",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-03-31T19:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dfe469aa39fd7d004a81898bcfb071242828a17",
"body": "When reading logs, lines like\n```\nWARN worker-13 mrt_file: not enough bytes: input bytes left - 3, want to read - 1024; skipping ^]]3mfile=./2025-11-05/rrc00/2025.11/updates.20251105.0600.gz\nWARN worker-26 mrt_file: not enough bytes: input bytes left - 3, want to read - 1024; skipping ^]]3mfile=./20\n[…]\n5/2025.11/updates.20251105.0605.gz\n```\nMade me think the full file was skipped, while only the attributes for\nthis message were skipped.\n\nI think adding context to the warning messages clarifies them.",
"is_bot": false,
"headline": "Add context to bgpkit warning messages",
"author_name": "Ties de Kock",
"author_login": "ties",
"committed_at": "2026-03-31T19:05:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da6b8dd7540318d60b2c9a702e33ff204149fe02",
"body": "Fix OTC attribute handling in WASM and withdrawal messages",
"is_bot": false,
"headline": "Merge pull request #270 from bgpkit/dev/fix-wasm-otc-null-serialization",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-24T00:19:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76177c5eefe877b88402d29b9cf51caa072d3066",
"body": "…nstall-action",
"is_bot": false,
"headline": "Fixed MSRV action - use cargo install with cache instead of taiki-e/i…",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-24T00:08:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52387976c17832282d5e42895046935f291a3e1a",
"body": "Documentation fixes:\n- Fixed broken Elementor links in bgp/mod.rs with proper crate:: prefix\n- Escaped brackets in ris_subscribe.rs example path pattern\n- Fixed 5 bare URL warnings by adding angle brackets\n\nGitHub Actions improvements:\n- Consolidated format.yml into build.yml as parallel jobs\n- Adde\n[…]\n\n- Added documentation check with RUSTDOCFLAGS=-D warnings\n- Changed MSRV check to use taiki-e/install-action@cargo-msrv\n- Split monolithic job into parallel: format, doc, clippy, build-and-test, msrv",
"is_bot": false,
"headline": "Fixed rustdoc warnings and consolidated GitHub Actions workflow",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-24T00:07:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6cd1650d6ffd141fbf5370201b2478e12353e8f",
"body": "- Add test to verify only_to_customer serializes as null (not 0) for messages without OTC attribute\n- Fix withdrawal elements to not inherit only_to_customer from UPDATE message\n- Update CHANGELOG with bug fixes\n\nFixes #269",
"is_bot": false,
"headline": "Fix OTC attribute handling in WASM and withdrawal messages",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-23T23:50:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1877da122da689d3aeb4922a9ed541241c6755d4",
"body": "build(deps): update tungstenite requirement from 0.28.0 to 0.29.0",
"is_bot": false,
"headline": "Merge pull request #268 from bgpkit/dependabot/cargo/tungstenite-0.29.0",
"author_name": "Mingwei Zhang",
"author_login": "digizeph",
"committed_at": "2026-03-23T14:09:10Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 57,
"commits_last_year": 283,
"latest_release_at": "2026-07-28T20:31:14Z",
"latest_release_tag": "v0.19.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 33,
"days_since_latest_release": 0,
"mean_days_between_releases": 57.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "bgpkit-parser",
"exists": true,
"license": "MIT",
"keywords": [
"bgp",
"bgpkit",
"mrt",
"network-programming"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/bgpkit-parser",
"is_deprecated": false,
"latest_version": "0.19.0",
"repository_url": "https://github.com/bgpkit/bgpkit-parser",
"versions_count": 70,
"total_downloads": 159292,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 10892,
"first_published_at": "2021-10-23T21:52:48.566965Z",
"latest_published_at": "2026-07-28T20:22:20.946901Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 14,
"stars": 138,
"watchers": 5,
"fork_history": {
"days": [
{
"date": "2022-01-12",
"count": 1
},
{
"date": "2022-09-29",
"count": 1
},
{
"date": "2022-12-27",
"count": 1
},
{
"date": "2023-05-08",
"count": 1
},
{
"date": "2023-09-13",
"count": 1
},
{
"date": "2024-06-11",
"count": 1
},
{
"date": "2024-07-12",
"count": 1
},
{
"date": "2024-08-08",
"count": 1
},
{
"date": "2024-09-30",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-05-24",
"count": 1
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
}
],
"complete": true,
"collected": 14,
"total_forks": 14
},
"star_history": null,
"open_issues_and_prs": 8
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"examples/local_only/Cargo.toml",
"examples/rib_entries_age_study/Cargo.toml",
"tests/fuzz/Cargo.toml"
],
"largest_source_bytes": 86860,
"source_files_sampled": 174,
"oversized_source_files": 3,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 5126
},
"dependencies": {
"manifests": [
"Cargo.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 43,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "ipnet",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.10"
},
{
"name": "itertools",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.15"
},
{
"name": "log",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4"
},
{
"name": "num_enum",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.7"
},
{
"name": "bitflags",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.6"
},
{
"name": "serde",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "bytes",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.7"
},
{
"name": "zerocopy",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.8"
},
{
"name": "hex",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4.3"
},
{
"name": "oneio",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.24"
},
{
"name": "regex",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "chrono",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4.38"
},
{
"name": "serde_json",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "wasm-bindgen",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2"
},
{
"name": "smallvec",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.13"
},
{
"name": "env_logger",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.11"
},
{
"name": "clap",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4.5"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "bitflags",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "bytes",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "chrono",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "clap",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "env_logger",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "hex",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "ipnet",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "itertools",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "log",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "num_enum",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "oneio",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "regex",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde_json",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "smallvec",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "wasm-bindgen",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "zerocopy",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "anyhow",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "arbitrary",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "bgpkit-broker",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "bzip2",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "criterion",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "crossbeam-channel",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "csv",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "ctrlc",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "flate2",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "futures-util",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "indicatif",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "kafka",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "libfuzzer-sys",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "md5",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "plotters",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "rayon",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tempfile",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tokio",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tokio-tungstenite",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tracing",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tracing-subscriber",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tungstenite",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "which",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "@bgpkit/parser",
"direct": false,
"version": "0.18.0",
"ecosystem": "npm"
},
{
"name": "@bgpkit/parser",
"direct": false,
"version": "^0.18.0",
"ecosystem": "npm"
},
{
"name": "kafkajs",
"direct": false,
"version": "^2.2.4",
"ecosystem": "npm"
},
{
"name": "seek-bzip",
"direct": false,
"version": "^2.0.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 44,
"direct_count": 17,
"indirect_count": 27
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 168,
"open_issues": 8,
"closed_ratio": 0.931,
"closed_issues": 108,
"closed_unmerged_prs": 22
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "digizeph",
"commits": 758,
"avatar_url": "https://avatars.githubusercontent.com/u/659667?v=4"
},
{
"type": "User",
"login": "ties",
"commits": 51,
"avatar_url": "https://avatars.githubusercontent.com/u/199058?v=4"
},
{
"type": "User",
"login": "jmeggitt",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/5491072?v=4"
},
{
"type": "User",
"login": "bswinnerton",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/934497?v=4"
},
{
"type": "User",
"login": "tobez",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/63679?v=4"
}
],
"contributors_sampled": 5,
"top_contributor_share": 0.88
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"audit.yml",
"build.yml",
"codecov.yml",
"release.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/13 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "b48c33d1e6b5e129f850894a8de6fecc397d3aef",
"ran_at": "2026-07-29T00:56:47Z",
"aggregate_score": 5.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T20:36:25Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-28T19:57:46Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 288,
"created_at": "2026-06-10T07:41:41Z",
"last_comment_at": "2026-06-12T02:26:22Z",
"last_comment_author": "JustinLoye"
},
{
"number": 289,
"created_at": "2026-06-16T01:06:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 290,
"created_at": "2026-06-16T02:56:20Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 297,
"created_at": "2026-07-02T17:35:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 299,
"created_at": "2026-07-13T16:09:09Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 301,
"created_at": "2026-07-13T17:53:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 303,
"created_at": "2026-07-13T17:56:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 304,
"created_at": "2026-07-13T18:23:25Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/bgpkit/bgpkit-parser",
"host": "github.com",
"name": "bgpkit-parser",
"owner": "bgpkit"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 67,
"calibrated": 78,
"calibration": "2026-08-02"
}
}
],
"value": 78,
"inputs": {
"security": 66,
"vitality": 85,
"community": 53,
"governance": 64,
"calibration": "2026-08-02",
"engineering": 65,
"ai_readiness": 68,
"weighted_overall_raw": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 85,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"commits_last_year": 283,
"human_commit_share": 0.97,
"days_since_last_push": 0,
"active_weeks_last_year": 33
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "33/52 weeks with commits",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 33
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "283 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 283
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"releases_count": 57,
"latest_release_tag": "v0.19.0",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 57.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "57 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 57
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~57.4 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 57.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 53,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"forks": 14,
"stars": 138,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "138 stars",
"points": 34.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 138
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "14 forks",
"points": 9.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 14
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 67,
"inputs": {
"packages": [
"bgpkit-parser"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 159292,
"monthly_downloads": 10892
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "10,892 downloads/month across crates",
"points": 53.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 10892,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 28,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 5,
"top_contributor_share": 0.88
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 88% of commits",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 88
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "5 contributors",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 5
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 75,
"inputs": {
"merged_prs": 168,
"open_issues": 8,
"closed_issues": 108,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.931,
"closed_unmerged_prs": 22,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "93% of issues closed",
"points": 39.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 93
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "168/190 decided PRs merged",
"points": 26.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 168,
"decided": 190
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/13 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"followers": 121,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "bgpkit",
"public_repos": 37,
"account_age_days": 1791
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "121 followers of bgpkit",
"points": 15,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 121,
"login": "bgpkit"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "37 public repos, account ~4 yr old",
"points": 21.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 37
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"bgpkit-parser"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "70 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 70
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 65,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"bgp",
"rust",
"mrt",
"bmp"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 66,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/13 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 1 resolved dependencies against OSV; 43 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 1
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 43
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 43,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 68,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.784,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 5126
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "76 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 76,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"examples/local_only/Cargo.toml",
"examples/rib_entries_age_study/Cargo.toml",
"tests/fuzz/Cargo.toml"
],
"dependency_bot_commit_share": 0.03
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml, examples/local_only/Cargo.toml, examples/rib_entries_age_study/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml, examples/local_only/Cargo.toml, examples/rib_entries_age_study/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "3 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 86860,
"source_files_sampled": 174,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/174 source files over 60KB",
"points": 54.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 174,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"library",
"cli"
],
"scores": {
"cli": 4,
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:crates",
"weight": 6
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:clap",
"weight": 4
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:bgpkit-parser@0.19.0; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-29T00:57:04.019992Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bgpkit/bgpkit-parser.svg",
"full_name": "bgpkit/bgpkit-parser",
"license_state": "standard",
"license_spdx": "MIT"
}