公开记录存在风险
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 17:56 UTC
darylldoyle / svg-sanitizer
A PHP SVG/XML Sanitizer
darylldoyle/svg-sanitizer 的健康指数为 100 分中的 44 分，处于「存在风险」区间。 其得分最高的类别是Community & Adoption（68/100），最低的是AI Readiness（28/100）。 最近一次更新在 344 天前。 近期的大部分工作由 1 位贡献者完成。
44
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
44
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
Abandonment Policy applies a 85% multiplier to weighted overall health.
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Packagist | enshrined/svg-sanitize | 0.22.0 | 1,330,159 | 48 | 344 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
31
开发活跃度
11危急
疑似弃置
有工作送达，却无人处理
344 天内没有人类提交不计自动化提交问题无人回应OpenSSF Scorecard 判定其缺乏维护持续集成已损坏
仅有沉默从不构成判定——一个小而完备的库可能多年无需提交。此提示需同时满足两点：长期没有人类提交，且项目明显未履行应尽的义务。自动化提交不计作维护。
弃置状态如何评估评分方式
| 3.6/36 | 推送新近度 — 最近一次推送于 344 天前 |
| 0.7/36 | 提交节奏 — 52 周中有 1 周有提交 |
| 6.3/18 | 提交量 — 最近一年 4 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
所用输入
| commits_last_year | 4 |
| human_commit_share | 1 |
| days_since_last_push | 344 |
| active_weeks_last_year | 1 |
发布纪律
62中等
评分方式
| 27/27 | 有发布版本 — 已发布 1 个发布版本 |
| 16.2/36 | 发布时效 — 最近一次发布版本于 344 天前 |
| 12.6/27 | 发布节奏 — 节奏未知（仅一次发布） |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 1 |
| latest_release_tag | 0.22.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 344 |
| mean_days_between_releases | — |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
68
流行度与采用
68中等
评分方式
| 44.4/60 | 星标 — 545 个星标 |
| 15.2/25 | 复刻 — 68 个复刻 |
| 7.9/15 | 关注者 — 27 位关注者 |
所用输入
| forks | 68 |
| stars | 545 |
| watchers | 27 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（GPL-2.0） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
93优秀
评分方式
| 80/80 | 月度下载量 — packagist 合计每月 1,330,159 次下载 |
| 13.4/20 | 注册表被依赖数 — 101 个软件包依赖它 |
所用输入
| packages | enshrined/svg-sanitize |
| dependents | 101 |
| ecosystems | packagist |
| total_downloads | 47,298,956 |
| monthly_downloads | 1,330,159 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
63
维护者韧性（巴士系数）
40存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 7.9/22.5 | 提交分布 — 头号贡献者编写了 65% 的提交 |
| 13.5/13.5 | 贡献者广度 — 16 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 15 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 16 |
| top_contributor_share | 0.65 |
议题与 PR 响应能力
72良好
评分方式
| 35.1/46.8 | 议题解决 — 75% 的议题已关闭 |
| 29.5/38.3 | PR 接受 — 已裁定的 PR 中 37/48 已合并 |
| 7.5/15 | OpenSSF Scorecard：Code-Review — Found 8/14 approved changesets -- score normalized to 5 |
所用输入
| merged_prs | 37 |
| open_issues | 17 |
| closed_issues | 51 |
| issue_closed_ratio | 0.75 |
| closed_unmerged_prs | 11 |
所有权与托管责任
58中等
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 12.9/25 | 所有者影响力 — darylldoyle 有 62 位关注者 |
| 23.6/25 | 既往记录 — 38 个公开仓库，账户约 14 年 |
所用输入
| followers | 62 |
| owner_type | User |
| is_verified | — |
| owner_login | darylldoyle |
| public_repos | 38 |
| account_age_days | 5,461 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
91优秀
评分方式
| 25/25 | 已发布且可解析 — packagist 上有 1 个软件包 |
| 26/35 | 发布时效 — 最近一次发布于 344 天前 |
| 20/20 | 版本历史 — 48 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | enshrined/svg-sanitize |
| ecosystems | packagist |
| any_deprecated | 否 |
| min_days_since_publish | 344 |
工程质量
基础的工程与文档实践是否到位？
58
工程实践
56中等
评分方式
| 24/24 | CI 工作流 — 2 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 6.4/6.4 | .editorconfig |
| 2/20 | OpenSSF Scorecard：CI-Tests — 1 out of 9 merged PRs checked by a CI test -- score normalized to 1 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 是 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
60中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 5 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | svg-sanitizer, svg, security, xml, php-library |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
38
安全态势
38存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 0.2/2.5 | CI-Tests — 1 out of 9 merged PRs checked by a CI test -- score normalized to 1 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 8/14 approved changesets -- score normalized to 5 |
| 2.5/2.5 | Contributors — project has 15 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — 无数据 |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — 无数据 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — 无数据 |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 3.8 |
已排除计分（无数据或不适用）：branch_protection, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
28
AI 代理上下文与指引
21危急
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 21.3/40 | 可读的提交历史 — 100 次人类提交中有 40 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.4 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — 无数据 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。
面向模型的代码可读性
55中等
评分方式
| 0/45 | 可类型检查的代码 — PHP，未配置类型检查 |
| 55/55 | 可控的文件大小 — 采样的 18 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | PHP |
| largest_source_bytes | 22,794 |
| source_files_sampled | 18 |
| oversized_source_files | 0 |
关键数据
545GitHub 星标
16贡献者
4最近 12 个月提交数
344距最近推送天数
1发布版本数
1巴士系数（bus factor）
17开放议题
Packagist软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
更多细节
Star 与 Fork 历史 0 ★ / 68 ⇿
0Star
68Fork
1发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 1修订 0
每个点涵盖 10 天。
OpenSSF Scorecard 3.8 / 10
3.8综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 1 | CI-Tests | 1 out of 9 merged PRs checked by a CI test -- score normalized to 1 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 8/14 approved changesets -- score normalized to 5 |
| 10 | Contributors | project has 15 contributing companies or organizations |
| 不适用 | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 不适用 | Packaging | packaging workflow not detected |
| 不适用 | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 不适用 | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
全部依赖 4
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 4 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| Packagist | ext-dom | — | 间接 |
| Packagist | ext-libxml | — | 间接 |
| Packagist | php | — | 间接 |
| Packagist | phpunit/phpunit | — | 间接 |
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"svg-sanitizer",
"svg",
"security",
"xml",
"php-library"
],
"is_fork": false,
"size_kb": 369,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 70478
},
"pushed_at": "2025-08-12T15:43:45Z",
"created_at": "2015-06-18T22:17:33Z",
"owner_type": "User",
"updated_at": "2026-07-15T08:52:44Z",
"description": "A PHP SVG/XML Sanitizer",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-2.0",
"default_branch": "master",
"license_spdx_raw": "GPL-2.0",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "http://enshrined.co.uk",
"name": "Daryll Doyle",
"type": "User",
"login": "darylldoyle",
"company": "@10up",
"location": "UK",
"followers": 62,
"avatar_url": "https://avatars.githubusercontent.com/u/968731?v=4",
"created_at": "2011-08-09T11:22:20Z",
"is_verified": null,
"public_repos": 38,
"account_age_days": 5461
},
"license": {
"state": "standard",
"spdx_id": "GPL-2.0",
"raw_spdx": "GPL-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "0.22.0",
"kind": "minor",
"published_at": "2025-08-12T10:18:15Z"
}
],
"recent_commits": [
{
"oid": "c1ad90f6a3819ec40fb98fff0193f14fdeab35c8",
"body": "Add PHP 8.5 to test matrix",
"is_bot": false,
"headline": "Merge pull request #119 from lolli42/lolli-1",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2025-08-12T15:43:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "089829100b0c114bf1cf107ea17440917dd3ad95",
"body": null,
"is_bot": false,
"headline": "Add PHP 8.5 to test matrix",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2025-08-12T15:34:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0afa95ea74be155a7bcd6c6fb60c276c39984500",
"body": "[SECURITY] Prevent bypass via mixed-case SVG attributes",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2025-08-12T10:13:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a0a1eaf0c6b0b540dc945fe30c93cf106b357c1",
"body": "Ensure SVG attribute names with mixed casing (e.g., `xlink:HrEf`\ninstead of `xlink:href`) are properly analyzed and sanitized to\nprevent bypasses.",
"is_bot": false,
"headline": "[SECURITY] Prevent bypass via mixed-case SVG attributes",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2025-08-11T15:25:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e477468fac5c5ce933dce53af3e8e4e58dcccc9",
"body": "Update AllowedAttributes.php",
"is_bot": false,
"headline": "Merge pull request #112 from Orgoth/patch-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2025-01-13T09:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b154c6ec5a607193b3e0bbb20aa052426a5edb89",
"body": "Added dominant-baseline to the allowed attributes",
"is_bot": false,
"headline": "Update AllowedAttributes.php",
"author_name": "Orgoth",
"author_login": null,
"committed_at": "2025-01-10T08:11:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "068d9fcf912c88a0471d101d95a2caa87c50aee7",
"body": "Support PHP 8.4",
"is_bot": false,
"headline": "Merge pull request #110 from lolli42/lolli-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-09-05T10:18:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dd11e47abe71e8aaeb089d453e3b5a99923e38c",
"body": null,
"is_bot": false,
"headline": "Use actions/checkout@v4, v3 is deprecated",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2024-08-12T12:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd26ab8996126501b2cfd6eef6d6b8e416e2845d",
"body": "PHP 5.6 and 7.0 are so old that the don't support\nthe '?' nullable parameter. Do support PH> 8.4,\nthese versions have to be dropped now.",
"is_bot": false,
"headline": "Require PHP ^7.1",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2024-08-12T12:27:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0b26c3541f7153d438ebdf4494ee2bd98a654ae",
"body": null,
"is_bot": false,
"headline": "Add PHP 8.4 to test matrix",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2024-08-12T12:25:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71b62a0feae7daf683b5d89fa55dca4b86dd289c",
"body": "foo(string $bar = null) is deprecated, use\nfoo(?string $bar = null) instead.",
"is_bot": false,
"headline": "Support PHP 8.4",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2024-08-12T12:24:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcd646a1a9f9fafd9aef94cabb83d4b4401b6de7",
"body": "Make sure nested php tags are also removed when sanitising svg",
"is_bot": false,
"headline": "Merge pull request #108 from gawpertron/fix/recursive-php-sanitisation",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-08-07T14:32:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09ed5075f7bc9d8802faef8dcfce619603380951",
"body": null,
"is_bot": false,
"headline": "Make sure nested php tags are also removed when sanitising svg",
"author_name": "Gawpertron",
"author_login": null,
"committed_at": "2024-08-07T12:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15668e029c9f3076fd85cae1c5de92fcea5ca2bf",
"body": null,
"is_bot": false,
"headline": "Update readme badge",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-06-18T10:47:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e95cd17be68e45f523cbfb0fe50cdd891b0cf20e",
"body": "Preserve libxml errors after failed parsing",
"is_bot": false,
"headline": "Merge pull request #101 from dpushkarev/preserve-libxml-errors",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-06-18T10:27:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9648e156195c67074734c2ed176a5b930465a917",
"body": null,
"is_bot": false,
"headline": "Remove trailing comma",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-06-18T10:25:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5e89d93c84a399c042229bb6a52a95fa94067e7",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into preserve-libxml-errors",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-06-18T10:19:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9460a4220b504178c4a6c1c0d5032765664ee77",
"body": "using qualified node names",
"is_bot": false,
"headline": "Merge pull request #102 from igor-krein/using-qualified-node-names",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-06-18T10:11:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "436e592b55f0859c63fc654f9115b7d6e1892c15",
"body": "Correct processing of attributes like xml:space",
"is_bot": false,
"headline": "using qualified node names",
"author_name": "Igor Peisakhovich",
"author_login": "igor-krein",
"committed_at": "2024-05-31T08:09:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d924bd10208d285b577b093fb2e83550069a330",
"body": null,
"is_bot": false,
"headline": "Preserve libxml errors after failed parsing",
"author_name": "Denis Pushkarev",
"author_login": null,
"committed_at": "2024-03-28T09:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a2c069dab3843ca4d887ff09c972fc7033888d0",
"body": "Allow the enabling of loading large files",
"is_bot": false,
"headline": "Merge pull request #98 from darylldoyle/feature/load-huge-files",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-22T17:51:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1af5cd21636306414da3f6ad4707b98c7601582",
"body": "Feature/8.3 support",
"is_bot": false,
"headline": "Merge pull request #99 from darylldoyle/feature/8.3-support",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T17:34:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "726da34495c01e6a727d26345381c2e7344ca868",
"body": null,
"is_bot": false,
"headline": "Fix 5.6 test",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T17:32:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f325f0f81cbfba5524f99131c41a7cbad5c2d6e",
"body": null,
"is_bot": false,
"headline": "Revert change",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T17:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f35972671d68e738480df50ade0543cdc31cd95",
"body": null,
"is_bot": false,
"headline": "Fix 5.6 test",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T17:27:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f511861f2b8e38cacb33f0d45fa90ceca4bd0a1",
"body": null,
"is_bot": false,
"headline": "Support 8.3",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T17:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5baf2f3efc12e30eb3fb9fae16dc5cb85f86074f",
"body": null,
"is_bot": false,
"headline": "Allow the enabling of loading large files",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T17:20:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a63136cc7cb9161efd267ea4237953845106f768",
"body": "[BUGFIX] Restore libxml error handler and clear errors",
"is_bot": false,
"headline": "Merge pull request #90 from lolli42/lolli-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2024-02-14T16:07:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e42eadd31fce0f8821620921801d35bc37e461c9",
"body": "Revert changes introduced for GHSA-xrqq-wqh4-5hg2 (CVE-2023-28426)",
"is_bot": false,
"headline": "Merge pull request #89 from ohader/reject/CVE-2023-28426",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-07-18T14:50:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38f466b29a7be6ad9a9248a0c6f4183304f84acb",
"body": "When using libxml_use_internal_errors(true), errors\npile up in an internal error handler. When not\nresetting errors using libxml_clear_errors(),\nsubsequent libxml usages may fail.\n\nThe patch properly restores the previous libxml\nerror handler value and clears errors.",
"is_bot": false,
"headline": "[BUGFIX] Restore libxml error handler and clear errors",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2023-04-14T22:16:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3729690bc660cbdad840f7608d5bdcf32e5e3f90",
"body": "https://github.com/darylldoyle/svg-sanitizer/commit/cce18bc237c05c6e093e9672db7926788da9b322\n\nThis change partially reverts changes of the mentioned commit, see\nhttps://github.com/darylldoyle/svg-sanitizer/issues/88 for details.\n\n* remove package `ezyang/htmlpurifier` and its invocation\n* adjust mod\n[…]\n(fine as regular bugfix, but did not qualify for a security fix)\n\nCVE-2023-28426 does not fix a real vulnerability and will be\nrequested to be rejected in the CVE process at cve.mitre.org.\n\nFixes: #88",
"is_bot": false,
"headline": "Revert changes introduced for GHSA-xrqq-wqh4-5hg2 (CVE-2023-28426)",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2023-03-21T14:49:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "239e257605e2141265b429e40987b2ee51bba4b4",
"body": "PHP 5.6 compatibility",
"is_bot": false,
"headline": "Merge pull request #87 from darylldoyle/feature/5.6-support",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-20T10:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71c629723983db4a7318baff6d46f305a7db9b16",
"body": null,
"is_bot": false,
"headline": "PHPUnit deps",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-20T10:48:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1024d8c6270f727a7f6859813a42d2367aeb981b",
"body": null,
"is_bot": false,
"headline": "Test out 5.6 compatibility",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-20T10:46:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cce18bc237c05c6e093e9672db7926788da9b322",
"body": "Fix/advisory 2",
"is_bot": false,
"headline": "Merge pull request from GHSA-xrqq-wqh4-5hg2",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-20T10:41:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e3d2ecbd73ef0e28302a53b5ef94b919b83425d",
"body": "[TASK] Add PHP 8.1 and 8.2 to test matrix",
"is_bot": false,
"headline": "Merge pull request #81 from lolli42/lolli-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T12:07:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6740534168ddf8fa21f81cb942cbadf92167723",
"body": null,
"is_bot": false,
"headline": "[TASK] Add PHP 8.1 and 8.2 to test matrix",
"author_name": "Christian Kuhn",
"author_login": "lolli42",
"committed_at": "2023-03-17T11:10:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee1f563424cdeb7d0738f6f6510dbc72a6524ba",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into fix/advisory-2",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:44:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9eadebe88c2272f9f3904089934d868145f97cb",
"body": "[ADD] Attribute `vector-effect`",
"is_bot": false,
"headline": "Merge pull request #77 from xerc/patch-2",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:38:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcb10764b1424aaa05bc9d86fc954c415b1ce8c2",
"body": "Spelling",
"is_bot": false,
"headline": "Merge pull request #79 from brianteeman/patch-2",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:30:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f57fb38e0990b3d39528101e3f9d92ac8cb986b5",
"body": "[TASK] Update section about svg-sanitizer in TYPO3",
"is_bot": false,
"headline": "Merge pull request #75 from ohader/readme-typo3",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:19:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "355a65d92cb88dba7efa0ac122bb597bacc9d3e6",
"body": "closes #74",
"is_bot": false,
"headline": "Remove most HTML and MathML elements",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9642320b22fca424ce3242a5938d96d2c4769c5e",
"body": null,
"is_bot": false,
"headline": "Add additional tests",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:15:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b402edb63e1b3dbad152034a05dd4e6b6c0fcf8f",
"body": null,
"is_bot": false,
"headline": "A couple of updates from pulling in HTMLPurifier",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27692a25caf856258987cfa4c1a8eaada84795d3",
"body": "…nverting to a text node",
"is_bot": false,
"headline": "Pull in HTMLPurifier to sanitise HTML elements within CDATA before co…",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T10:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a92cc6c9f02273d55f5802d36a4959ce5553861",
"body": "Fix return typehint for sanitize",
"is_bot": false,
"headline": "Merge pull request #86 from norkunas/patch-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2023-03-17T09:55:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf6250c97b0cd9aaa2cf53cbe82e94f85fcbb34e",
"body": "Based on comment in source:\r\n\r\n> If we couldn't parse the XML then we go no further. Reset and return false",
"is_bot": false,
"headline": "Fix return typehint for sanitize",
"author_name": "Tomas Norkūnas",
"author_login": "norkunas",
"committed_at": "2023-02-22T06:01:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2321a914efa926f9cb93150864b00f4528d65d16",
"body": "Correct tiny typo in readme",
"is_bot": false,
"headline": "Merge pull request #84 from adamsilverstein/patch-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-11-21T09:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ac2f093adb99ce69778f2f6e8d93677f2789b44",
"body": null,
"is_bot": false,
"headline": "Correct tiny typo in readme",
"author_name": "Adam Silverstein",
"author_login": "adamsilverstein",
"committed_at": "2022-11-15T20:27:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "056135d727bd393415974439cffe6bed6d428418",
"body": "proccess ==> process",
"is_bot": false,
"headline": "Spelling",
"author_name": "Brian Teeman",
"author_login": "brianteeman",
"committed_at": "2022-06-14T14:05:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33d00c76d59920ac153fd0ffd99898b2f3a4f52b",
"body": "https://developer.mozilla.org/en-US/docs/Web/SVG/Attribute/vector-effect\r\nhttps://caniuse.com/vector-effect",
"is_bot": false,
"headline": "[ADD] Attribute `vector-effect`",
"author_name": "Marcus Förster",
"author_login": "xerc",
"committed_at": "2022-04-16T09:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e50b83a2f1f296ca61394fe88fbfe3e896a84cf4",
"body": "[BUGFIX] Allow DOMText and implicitly DOMCdataSection",
"is_bot": false,
"headline": "Merge pull request #72 from ohader/issue-70",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-21T09:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e70b7b7651bb12a8d47731450cb748410f492ca",
"body": null,
"is_bot": false,
"headline": "[TASK] Update section about svg-sanitizer in TYPO3",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2022-02-17T10:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16bc4f6bc7c246d0e42c5d004f7c2b8fd0b017af",
"body": "Recent change disallowed CDATA sections, however the actual fix\nwould have been to disallow non SVG-elements when used inline in\nsome HTML-context.\n\nResolves: #70",
"is_bot": false,
"headline": "[BUGFIX] Allow DOMText and implicitly DOMCdataSection",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2022-02-17T09:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50c0f86ab08d8f3a986ac4f57874492a22171708",
"body": "Make sure that attributes are correctly caught no matter the case",
"is_bot": false,
"headline": "Merge pull request #73 from darylldoyle/fix/case-sensitive-attrs",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-16T19:59:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4617e1b44c4fe21956011878c2720d01be95e002",
"body": null,
"is_bot": false,
"headline": "Make sure that attributes are correctly caught no matter the case",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-16T19:55:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c06b26a17664b35abe3f29a8eef40adba5db49f",
"body": "Added filterUnits to allowed attributes",
"is_bot": false,
"headline": "Merge pull request #41 from joshuabaker/patch-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:58:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "454682a67b335bb918952b93c4e699a36012c568",
"body": "Feature/update codeclimate",
"is_bot": false,
"headline": "Merge pull request #69 from darylldoyle/feature/update-codeclimate-id",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:53:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a8cab34f3944e9cc306a1b6bfed44288dfc1d89",
"body": null,
"is_bot": false,
"headline": "Remove old branch ref",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4281298ee5dee929fbe29c5013c597d86f5da4e1",
"body": null,
"is_bot": false,
"headline": "Remove Todo",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:43:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66dcbb899c1522b271eec1ad2f329cb35b6cbe05",
"body": null,
"is_bot": false,
"headline": "Remove non-required vars",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:42:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ab366fae4563251ef37f122eca748c31c06722b",
"body": null,
"is_bot": false,
"headline": "Run tests for coverage",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:39:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "445c5bcd543dafd23b2119fd817bc09ff7f1f215",
"body": null,
"is_bot": false,
"headline": "Testing secret",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:27:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45655b3111e273094f8f3bc399dee1028b6c1124",
"body": null,
"is_bot": false,
"headline": "Use new reporter ID",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1903827446ec454d239f7628313f96aa7a646639",
"body": "[TASK] Repository and CI clean-up",
"is_bot": false,
"headline": "Merge pull request #61 from ohader/task-cleanup",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-14T00:18:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01b66d4e75ba5af38103c04b3aeb5b0139d75b8e",
"body": "The doctype removal is now handled by cleanUnsafeNodes so there’s no reason for a specific method",
"is_bot": false,
"headline": "Trying to remove the doctype twice was causing a segfault",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-13T23:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17e12ba9c2881caa6b167d0fbea555c11207fbb0",
"body": "Advisory fix 1",
"is_bot": false,
"headline": "Merge pull request from GHSA-fqx8-v33p-4qcc",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2022-02-13T00:42:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "689e8691380a9478778444abbc003190e26639e2",
"body": null,
"is_bot": false,
"headline": "Test caught in crossfire",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-10-11T23:10:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3af6a6f034c0cfc7aee8a530cd832f6cf49e078e",
"body": null,
"is_bot": false,
"headline": "New test to cover inalid/malformed nodes",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-10-11T23:10:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15c25adcc0d49ac9931ec7f4a36de45bc3b31650",
"body": "Tags with these attributes will cause the parser to break out of foreign content",
"is_bot": false,
"headline": "Remove font tags",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-10-11T23:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65138c4561453b49901e79757f9b13806bf2b8d0",
"body": "These will cause the parser to break out of foreign content",
"is_bot": false,
"headline": "Remove HTML elements",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-10-11T23:09:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03e88a8aafd69eb83faa33c9a38da482ac9187d1",
"body": null,
"is_bot": false,
"headline": "Remove malformed elements",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-10-11T23:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8355d2c8dacd623f76a92ab7290341228a5ac17",
"body": null,
"is_bot": false,
"headline": "[TASK] Format code, add .editorconfig",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-08-26T13:45:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4a794ecad079c36a2a2845b43198031c0efdf53",
"body": null,
"is_bot": false,
"headline": "[TASK] Clean up code",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-08-26T12:48:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72dc149849b38bed808ef28bc33e4d7cbb8713b1",
"body": null,
"is_bot": false,
"headline": "[TASK] Add .gitattributes",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-08-26T12:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5f88448f45568ce797f9a3ec26aeeb9baa97d8b",
"body": null,
"is_bot": false,
"headline": "[TASK] Remove TravisCI, add Code Climate GitHub action",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-08-26T12:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "413f95375c62a53b56d11fb5e48df1272e9135e0",
"body": null,
"is_bot": false,
"headline": "[TASK] Enable PHP linting for GitHub actions",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-08-26T12:10:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "307b42066fb0b76b5119f5e1f0826e18fefabe95",
"body": "Fixing test suite",
"is_bot": false,
"headline": "Merge pull request #59 from darylldoyle/feature/fix-tests",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-08-09T23:46:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14529abb144088d7de7e4384686de1ca001a1911",
"body": null,
"is_bot": false,
"headline": "Fixing test suite",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-08-09T23:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d5de401dc8db46877c914dde2a71a8106f7e8b3",
"body": "[BUGFIX] Ensure required sources are loaded in standalone scanner",
"is_bot": false,
"headline": "Merge pull request #57 from ohader/issue-43",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-08-09T23:37:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61acf12fcbf77dda1bc93ece0df2d0d83440bde3",
"body": "[BUGFIX] Avoid segmentation faults when processing entities",
"is_bot": false,
"headline": "Merge pull request #53 from ohader/fix/entity-seg-fault",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-08-09T23:36:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e79a5fd224b1ce087b01c973351c70fea282a66",
"body": "[TASK] Add GitHub action running tests",
"is_bot": false,
"headline": "Merge pull request #55 from ohader/issue-54",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-08-09T23:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73ef18094b5d4ccbaa761a032f4c6f1febac88cc",
"body": "Fixes: #43",
"is_bot": false,
"headline": "[BUGFIX] Ensure required sources are loaded in standalone scanner",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-08-08T13:50:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ec5ba161179350e45260926ab24e1775115a7da",
"body": null,
"is_bot": false,
"headline": "[TASK] Extend GitHub action test matrix",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-07-16T19:48:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b491c519dfcb0311f45dcd3aa6ccf9e6309bb2a3",
"body": "* remove `setUp` & `tearDown` methods\n* avoid compatibility issues between v6.5 and v8.5\n* streamline PHPUnit configuration",
"is_bot": false,
"headline": "[TASK] Simplifiy PHPUnit test cases",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-07-16T19:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05412a7626525390b58584e9dd8ff2eb6e26ef27",
"body": "Related: #54",
"is_bot": false,
"headline": "[TASK] Add GitHub action running tests",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-07-16T19:07:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dd44678137e8e16f7f4f0bf3a9c51de54226b29",
"body": "Related: #52",
"is_bot": false,
"headline": "[BUGFIX] Remove doctype after node elements have been analyzed",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-07-15T21:34:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "feff97136179341b66eff8ba5b3b3ff45b3c4e40",
"body": "Related: #52",
"is_bot": false,
"headline": "[TASK] Add test case causing segmentation fault",
"author_name": "Oliver Hader",
"author_login": "ohader",
"committed_at": "2021-07-15T21:02:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beff89576a72540ee99476aeb9cfe98222e76fb8",
"body": "Allow empty href values",
"is_bot": false,
"headline": "Merge pull request #42 from asilelik/master",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2021-01-21T10:13:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88eaa33bba8fc568f9ad801cdac2c1bb2dbb6776",
"body": "Fix a PHP 8 deprecation warning",
"is_bot": false,
"headline": "Merge pull request #45 from angrybrad/master",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-11-19T12:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c23734ebfa35aa40e975e76415da3698329ae7b2",
"body": null,
"is_bot": false,
"headline": "Check libxml version instead of PHP version",
"author_name": "Brad Bell",
"author_login": "angrybrad",
"committed_at": "2020-11-18T19:04:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88c7d62cd114855725ebb2535f11d73869c7ac8c",
"body": "https://php.watch/versions/8.0/libxml_disable_entity_loader-deprecation",
"is_bot": false,
"headline": "Fix a PHP 8 deprecation warning",
"author_name": "Brad Bell",
"author_login": "angrybrad",
"committed_at": "2020-10-22T19:24:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d237b8d15bcdf8266c33561acf4d62cb30aeab8",
"body": null,
"is_bot": false,
"headline": "Allow empty href values",
"author_name": "Asil Elik",
"author_login": "abarkine",
"committed_at": "2020-05-27T13:09:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cf3049f355d77fb659f0809c8694aff6d5c189d",
"body": "Fixes #40",
"is_bot": false,
"headline": "Added filterUnits to allowed attributes",
"author_name": "Joshua Baker",
"author_login": "joshuabaker",
"committed_at": "2020-05-27T09:40:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc66593f255b7d2613d8f22041180036979b6403",
"body": "Using the tags in Subject gave us more knowledge of the issue, but was causing a bottleneck in the sanitiser. This was especially noticable when using large SVGs, such as the one in useDosTestTwo.svg.\n\nInstead of using tags, I’ve now opted to store the afected elements (\\DOMElement) directly within \n[…]\ning and therefore the bottleneck that was being caused. It’s also allowed us to free up memory within Subject as once we have the affected elements in the array, we can remove the internal references.",
"is_bot": false,
"headline": "Substitute tags for holding the DOMElement itself",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-01-20T01:34:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ea93767a2bcb80e0be6763c22a8134c3878b982e",
"body": null,
"is_bot": false,
"headline": "Now only remove the <use> elements as they’re what causes the issue",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-01-20T01:27:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a68b1a0fb50fd60132a9cc873638aa538ae168b",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into develop",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-01-18T15:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "360d506ff20b099b4093e982be7deb082138c01d",
"body": "Spelling inconsistencies",
"is_bot": false,
"headline": "Merge pull request #36 from snipe/patch-1",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-01-18T15:00:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe9cac3af69a37d68910b055b98b5f2668de501",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into develop",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-01-18T14:59:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6624ea82c81ca78cfaeaf99b5832b8020e88d89a",
"body": null,
"is_bot": false,
"headline": "Update tests to account for allowing version attr",
"author_name": "Daryll Doyle",
"author_login": "darylldoyle",
"committed_at": "2020-01-18T14:55:46Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 4,
"latest_release_at": "2025-08-12T10:18:15Z",
"latest_release_tag": "0.22.0",
"releases_from_tags": false,
"days_since_last_push": 344,
"active_weeks_last_year": 1,
"days_since_latest_release": 344,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "enshrined/svg-sanitize",
"exists": true,
"license": "GPL-2.0-or-later",
"keywords": [],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/enshrined/svg-sanitize",
"is_deprecated": false,
"latest_version": "0.22.0",
"repository_url": "https://github.com/darylldoyle/svg-sanitizer",
"versions_count": 48,
"total_downloads": 47298956,
"dependents_count": 101,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 1330159,
"first_published_at": null,
"latest_published_at": "2025-08-12T10:13:48Z",
"latest_version_yanked": null,
"days_since_latest_publish": 344
}
]
},
"popularity": {
"forks": 68,
"stars": 545,
"watchers": 27,
"fork_history": {
"days": [
{
"date": "2016-06-07",
"count": 1
},
{
"date": "2017-01-12",
"count": 1
},
{
"date": "2017-06-19",
"count": 1
},
{
"date": "2017-06-27",
"count": 1
},
{
"date": "2018-09-19",
"count": 1
},
{
"date": "2018-09-30",
"count": 1
},
{
"date": "2018-11-01",
"count": 1
},
{
"date": "2019-01-03",
"count": 1
},
{
"date": "2019-01-27",
"count": 1
},
{
"date": "2019-07-24",
"count": 1
},
{
"date": "2019-12-06",
"count": 1
},
{
"date": "2019-12-26",
"count": 1
},
{
"date": "2020-01-17",
"count": 1
},
{
"date": "2020-05-13",
"count": 1
},
{
"date": "2020-05-22",
"count": 1
},
{
"date": "2020-07-01",
"count": 1
},
{
"date": "2020-07-12",
"count": 1
},
{
"date": "2020-07-24",
"count": 1
},
{
"date": "2020-10-22",
"count": 1
},
{
"date": "2020-12-25",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-04-06",
"count": 1
},
{
"date": "2021-04-16",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-06-28",
"count": 1
},
{
"date": "2021-07-07",
"count": 1
},
{
"date": "2021-07-15",
"count": 1
},
{
"date": "2021-07-30",
"count": 1
},
{
"date": "2021-08-19",
"count": 1
},
{
"date": "2021-09-03",
"count": 1
},
{
"date": "2021-09-17",
"count": 1
},
{
"date": "2021-09-21",
"count": 1
},
{
"date": "2021-10-06",
"count": 1
},
{
"date": "2021-11-30",
"count": 1
},
{
"date": "2022-02-10",
"count": 1
},
{
"date": "2022-02-17",
"count": 1
},
{
"date": "2022-02-21",
"count": 1
},
{
"date": "2022-02-22",
"count": 1
},
{
"date": "2022-03-25",
"count": 1
},
{
"date": "2022-04-07",
"count": 1
},
{
"date": "2022-04-30",
"count": 1
},
{
"date": "2022-05-25",
"count": 1
},
{
"date": "2022-06-13",
"count": 1
},
{
"date": "2022-06-21",
"count": 1
},
{
"date": "2022-08-01",
"count": 1
},
{
"date": "2022-10-14",
"count": 1
},
{
"date": "2022-11-15",
"count": 1
},
{
"date": "2023-01-15",
"count": 1
},
{
"date": "2023-01-24",
"count": 1
},
{
"date": "2023-02-22",
"count": 1
},
{
"date": "2023-04-15",
"count": 1
},
{
"date": "2023-05-08",
"count": 1
},
{
"date": "2023-08-23",
"count": 1
},
{
"date": "2023-09-20",
"count": 1
},
{
"date": "2023-11-14",
"count": 1
},
{
"date": "2023-12-27",
"count": 1
},
{
"date": "2024-03-27",
"count": 1
},
{
"date": "2024-05-31",
"count": 1
},
{
"date": "2024-06-13",
"count": 1
},
{
"date": "2024-06-18",
"count": 1
},
{
"date": "2024-07-09",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2025-08-11",
"count": 1
},
{
"date": "2025-10-22",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 68,
"total_forks": 68
},
"star_history": null,
"open_issues_and_prs": 25
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 22794,
"source_files_sampled": 18,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 4,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "ext-dom",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-libxml",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 4,
"direct_count": 0,
"indirect_count": 4
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 37,
"open_issues": 17,
"closed_ratio": 0.75,
"closed_issues": 51,
"closed_unmerged_prs": 11
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "darylldoyle",
"commits": 117,
"avatar_url": "https://avatars.githubusercontent.com/u/968731?v=4"
},
{
"type": "User",
"login": "ohader",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/402145?v=4"
},
{
"type": "User",
"login": "gudmdharalds",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/8835135?v=4"
},
{
"type": "User",
"login": "lolli42",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/2178068?v=4"
},
{
"type": "User",
"login": "angrybrad",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/61869?v=4"
},
{
"type": "User",
"login": "adamroyle",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/25002779?v=4"
},
{
"type": "User",
"login": "adamsilverstein",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2676022?v=4"
},
{
"type": "User",
"login": "abarkine",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/4799171?v=4"
},
{
"type": "User",
"login": "brianteeman",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1296369?v=4"
},
{
"type": "User",
"login": "hugopeek",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/5436121?v=4"
}
],
"contributors_sampled": 16,
"top_contributor_share": 0.65
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeclimate.yml",
"tests.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 1,
"reason": "1 out of 9 merged PRs checked by a CI test -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 8/14 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 15 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c1ad90f6a3819ec40fb98fff0193f14fdeab35c8",
"ran_at": "2026-07-22T17:55:47Z",
"aggregate_score": 3.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-04-19T06:30:49Z",
"oldest_open_prs": [
{
"number": 50,
"created_at": "2021-07-07T08:09:58Z",
"last_comment_at": "2022-02-14T00:54:47Z",
"last_comment_author": "darylldoyle"
},
{
"number": 60,
"created_at": "2021-08-19T19:31:25Z",
"last_comment_at": "2022-02-14T09:10:09Z",
"last_comment_author": "xerc"
},
{
"number": 62,
"created_at": "2021-08-26T15:38:57Z",
"last_comment_at": "2022-02-14T00:08:08Z",
"last_comment_author": "darylldoyle"
},
{
"number": 83,
"created_at": "2022-10-14T20:44:35Z",
"last_comment_at": "2024-09-08T23:08:03Z",
"last_comment_author": "verdy-p"
},
{
"number": 117,
"created_at": "2025-06-06T21:11:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 122,
"created_at": "2026-07-06T10:17:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 123,
"created_at": "2026-07-06T10:38:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 124,
"created_at": "2026-07-17T14:38:00Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2025-08-12T15:43:45Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 27,
"created_at": "2019-05-15T10:16:51Z",
"last_comment_at": "2021-08-08T13:17:20Z",
"last_comment_author": "ohader"
},
{
"number": 49,
"created_at": "2021-05-25T17:56:56Z",
"last_comment_at": "2022-08-09T21:39:44Z",
"last_comment_author": "benjiwheeler"
},
{
"number": 58,
"created_at": "2021-08-08T13:53:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 63,
"created_at": "2021-09-03T14:51:39Z",
"last_comment_at": "2021-09-03T15:08:33Z",
"last_comment_author": "ohader"
},
{
"number": 64,
"created_at": "2021-09-03T14:55:25Z",
"last_comment_at": "2024-10-15T09:53:44Z",
"last_comment_author": "verdy-p"
},
{
"number": 78,
"created_at": "2022-04-28T08:17:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 91,
"created_at": "2023-06-28T16:26:49Z",
"last_comment_at": "2024-12-18T19:53:57Z",
"last_comment_author": "Watercycle"
},
{
"number": 93,
"created_at": "2023-08-23T05:38:42Z",
"last_comment_at": "2024-09-08T21:33:57Z",
"last_comment_author": "verdy-p"
},
{
"number": 94,
"created_at": "2023-09-15T12:34:03Z",
"last_comment_at": "2024-09-08T05:30:22Z",
"last_comment_author": "verdy-p"
},
{
"number": 95,
"created_at": "2023-09-20T03:59:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 105,
"created_at": "2024-06-18T11:59:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 107,
"created_at": "2024-07-04T09:09:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 113,
"created_at": "2025-01-22T10:55:34Z",
"last_comment_at": "2025-08-13T15:18:14Z",
"last_comment_author": "ohader"
},
{
"number": 114,
"created_at": "2025-01-24T12:15:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 115,
"created_at": "2025-05-02T15:18:05Z",
"last_comment_at": "2025-08-13T15:14:17Z",
"last_comment_author": "ohader"
},
{
"number": 116,
"created_at": "2025-05-12T21:12:00Z",
"last_comment_at": "2025-08-13T23:50:37Z",
"last_comment_author": "grisha2217"
},
{
"number": 120,
"created_at": "2025-08-14T11:28:17Z",
"last_comment_at": "2026-03-04T21:25:37Z",
"last_comment_author": "jameswilson"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/darylldoyle/svg-sanitizer",
"host": "github.com",
"name": "svg-sanitizer",
"owner": "darylldoyle"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 0,
"pct": 85
}
}
],
"value": 44,
"inputs": {
"security": 38,
"vitality": 31,
"community": 68,
"governance": 63,
"engineering": 58,
"abandonment_cap": null,
"abandonment_state": "at_risk",
"abandonment_multiplier": 85,
"weighted_overall_before_abandonment": 52,
"overall_after_abandonment_multiplier": 44
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 31,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 11,
"inputs": {
"commits_last_year": 4,
"human_commit_share": 1,
"days_since_last_push": 344,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 344 days ago",
"points": 3.6,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 344
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "4 commits in the last year",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 4
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"releases_count": 1,
"latest_release_tag": "0.22.0",
"releases_from_tags": false,
"days_since_latest_release": 344,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 344 days ago",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 344
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"cap": null,
"state": "at_risk",
"guards": [
"recent_release"
],
"signals": [
"issue_rot",
"scorecard_unmaintained",
"broken_ci"
],
"red_flag": true,
"multiplier_pct": 85,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 5,
"unanswered_open_issues": 12,
"days_since_last_merged_pr": 344,
"days_since_last_human_commit": 344,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 344 days; 3 unmet obligation(s): issues unanswered, Scorecard reports it unmaintained, CI broken",
"points": 85,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 344,
"count": 3,
"signals": "issues unanswered, Scorecard reports it unmaintained, CI broken"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 68,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"forks": 68,
"stars": 545,
"watchers": 27,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "545 stars",
"points": 44.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 545
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "68 forks",
"points": 15.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 68
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "27 watchers",
"points": 7.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 27
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 93,
"inputs": {
"packages": [
"enshrined/svg-sanitize"
],
"dependents": 101,
"ecosystems": "packagist",
"total_downloads": 47298956,
"monthly_downloads": 1330159
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "1,330,159 downloads/month across packagist",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 1330159,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "101 packages depend on it",
"points": 13.4,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 101
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 16,
"top_contributor_share": 0.65
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 65% of commits",
"points": 7.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 65
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "16 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 16
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 15 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"merged_prs": 37,
"open_issues": 17,
"closed_issues": 51,
"issue_closed_ratio": 0.75,
"closed_unmerged_prs": 11
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "75% of issues closed",
"points": 35.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 75
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "37/48 decided PRs merged",
"points": 29.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 37,
"decided": 48
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 8/14 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"followers": 62,
"owner_type": "User",
"is_verified": null,
"owner_login": "darylldoyle",
"public_repos": 38,
"account_age_days": 5461
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "62 followers of darylldoyle",
"points": 12.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 62,
"login": "darylldoyle"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "38 public repos, account ~14 yr old",
"points": 23.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 38
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"packages": [
"enshrined/svg-sanitize"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 344
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 344 days ago",
"points": 26,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 344
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "48 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 48
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "1 out of 9 merged PRs checked by a CI test -- score normalized to 1",
"points": 2,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"svg-sanitizer",
"svg",
"security",
"xml",
"php-library"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 38,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 3.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "1 out of 9 merged PRs checked by a CI test -- score normalized to 1",
"points": 0.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 8/14 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 15 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "critical",
"name": "AI Readiness",
"value": 28,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "40 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 21.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 40,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 22794,
"source_files_sampled": 18,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/18 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 18,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T17:56:06.706923Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/darylldoyle/svg-sanitizer.svg",
"full_name": "darylldoyle/svg-sanitizer",
"license_state": "standard",
"license_spdx": "GPL-2.0"
}