公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 16:37 UTC
guybedford / es-module-lexer
Low-overhead lexer dedicated to ES module parsing for fast analysis
guybedford/es-module-lexer 的健康指数为 100 分中的 63 分，处于「中等」区间。 其得分最高的类别是Vitality（70/100），最低的是AI Readiness（30/100）。 最近一次更新在 9 天前。 近期的大部分工作由 1 位贡献者完成。
63
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
63
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| npm | es-module-lexer | 2.3.1 | 479,313,413 | 75 | 10 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
70
开发活跃度
55中等
评分方式
| 28.8/36 | 推送新近度 — 最近一次推送于 9 天前 |
| 4.2/36 | 提交节奏 — 52 周中有 6 周有提交 |
| 12.4/18 | 提交量 — 最近一年 23 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 19 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 23 |
| human_commit_share | 1 |
| days_since_last_push | 9 |
| active_weeks_last_year | 6 |
发布纪律
92优秀
评分方式
| 27/27 | 有发布版本 — 已发布 33 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 10 天前 |
| 19.8/27 | 发布节奏 — 约每 89.5 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 33 |
| latest_release_tag | 2.3.1 |
| releases_from_tags | 否 |
| days_since_latest_release | 10 |
| mean_days_between_releases | 89.5 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
69
流行度与采用
67中等
评分方式
| 48.9/60 | 星标 — 1,030 个星标 |
| 14.6/25 | 复刻 — 57 个复刻 |
| 3.9/15 | 关注者 — 6 位关注者 |
所用输入
| forks | 57 |
| stars | 1,030 |
| watchers | 6 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
100优秀
评分方式
| 80/80 | 月度下载量 — npm 合计每月 479,313,413 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | es-module-lexer |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 479,313,413 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
70
维护者韧性（巴士系数）
36存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 4/22.5 | 提交分布 — 头号贡献者编写了 82% 的提交 |
| 13.5/13.5 | 贡献者广度 — 26 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 12 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 26 |
| top_contributor_share | 0.822 |
议题与 PR 响应能力
83良好
评分方式
| 43.4/46.8 | 议题解决 — 93% 的议题已关闭 |
| 33.8/38.3 | PR 接受 — 已裁定的 PR 中 106/120 已合并 |
| 6/15 | OpenSSF Scorecard：Code-Review — Found 13/30 approved changesets -- score normalized to 4 |
所用输入
| merged_prs | 106 |
| open_issues | 7 |
| closed_issues | 90 |
| issue_closed_ratio | 0.928 |
| closed_unmerged_prs | 14 |
所有权与托管责任
73良好
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 23.7/25 | 所有者影响力 — guybedford 有 1,954 位关注者 |
| 25/25 | 既往记录 — 376 个公开仓库，账户约 15 年 |
所用输入
| followers | 1,954 |
| owner_type | User |
| is_verified | — |
| owner_login | guybedford |
| public_repos | 376 |
| account_age_days | 5,648 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — npm 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 10 天前 |
| 20/20 | 版本历史 — 75 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | es-module-lexer |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 10 |
工程质量
基础的工程与文档实践是否到位？
53
工程实践
62中等
评分方式
| 24/24 | CI 工作流 — 1 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 14/20 | OpenSSF Scorecard：CI-Tests — 17 out of 23 merged PRs checked by a CI test -- score normalized to 7 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
40存在风险
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
50
安全态势
50中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 1.8/2.5 | CI-Tests — 17 out of 23 merged PRs checked by a CI test -- score normalized to 7 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3/7.5 | Code-Review — Found 13/30 approved changesets -- score normalized to 4 |
| 2.5/2.5 | Contributors — project has 12 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 19 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 5 |
已排除计分（无数据或不适用）：branch_protection, packaging, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
30
AI 代理上下文与指引
34存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 33.6/40 | 可读的提交历史 — 100 次人类提交中有 63 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.63 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
31存在风险
评分方式
| 0/45 | 可类型检查的代码 — JavaScript，未配置类型检查 |
| 30.9/55 | 可控的文件大小 — 采样的 16 个源文件中有 7 个超过 60KB |
所用输入
| primary_language | JavaScript |
| largest_source_bytes | 902,016 |
| source_files_sampled | 16 |
| oversized_source_files | 7 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — samples |
所用输入
| example_dirs | samples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
1,030GitHub 星标
26贡献者
23最近 12 个月提交数
9距最近推送天数
33发布版本数
1巴士系数（bus factor）
7开放议题
npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- deps.dev does not index npm:es-module-lexer@2.3.1; advisories assessed against the repository dependency graph instead
- No resolved dependencies carried a version and a supported ecosystem
更多细节
Star 与 Fork 历史 0 ★ / 57 ⇿
0Star
57Fork
33发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 2次版本 11修订 20
每个点涵盖 7 天。
OpenSSF Scorecard 5.0 / 10
5.0综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 7 | CI-Tests | 17 out of 23 merged PRs checked by a CI test -- score normalized to 7 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 4 | Code-Review | Found 13/30 approved changesets -- score normalized to 4 |
| 10 | Contributors | project has 12 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 19 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
全部依赖 10
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 10 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| npm | @babel/cli | ^7.29.7 | 间接 |
| npm | @babel/core | ^7.29.7 | 间接 |
| npm | @babel/plugin-transform-modules-commonjs | ^7.29.7 | 间接 |
| npm | @swc/cli | ^0.8.1 | 间接 |
| npm | @swc/core | ^1.15.41 | 间接 |
| npm | @types/node | ^25.9.3 | 间接 |
| npm | kleur | ^4.1.5 | 间接 |
| npm | mocha | ^11.7.6 | 间接 |
| npm | terser | ^5.48.0 | 间接 |
| npm | typescript | ^6.0.3 | 间接 |
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2228,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 47599,
"JavaScript": 1056670,
"TypeScript": 11271
},
"pushed_at": "2026-07-13T01:00:31Z",
"created_at": "2019-08-08T03:05:41Z",
"owner_type": "User",
"updated_at": "2026-07-13T09:53:11Z",
"description": "Low-overhead lexer dedicated to ES module parsing for fast analysis",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "guybedford.com",
"name": "Guy Bedford",
"type": "User",
"login": "guybedford",
"company": "Cloudflare",
"location": "Vancouver, Canada",
"followers": 1954,
"avatar_url": "https://avatars.githubusercontent.com/u/598730?v=4",
"created_at": "2011-02-03T14:55:09Z",
"is_verified": null,
"public_repos": 376,
"account_age_days": 5648
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "2.3.1",
"kind": "patch",
"published_at": "2026-07-12T05:19:04Z"
},
{
"tag": "2.3.0",
"kind": "minor",
"published_at": "2026-07-12T05:18:52Z"
},
{
"tag": "2.2.0",
"kind": "minor",
"published_at": "2026-06-29T05:11:31Z"
},
{
"tag": "2.1.0",
"kind": "minor",
"published_at": "2026-04-25T22:50:46Z"
},
{
"tag": "2.0.0",
"kind": "major",
"published_at": "2025-12-07T08:34:29Z"
},
{
"tag": "1.7.0",
"kind": "minor",
"published_at": "2025-04-22T22:24:28Z"
},
{
"tag": "1.6.0",
"kind": "minor",
"published_at": "2025-04-22T22:24:17Z"
},
{
"tag": "1.5.4",
"kind": "patch",
"published_at": "2024-06-24T05:05:33Z"
},
{
"tag": "1.5.3",
"kind": "patch",
"published_at": "2024-05-17T19:19:40Z"
},
{
"tag": "1.5.2",
"kind": "patch",
"published_at": "2024-04-27T22:13:34Z"
},
{
"tag": "1.5.1",
"kind": "patch",
"published_at": "2024-04-27T21:17:29Z"
},
{
"tag": "1.5.0",
"kind": "minor",
"published_at": "2024-03-25T21:03:28Z"
},
{
"tag": "1.4.2",
"kind": "patch",
"published_at": "2024-03-19T04:18:45Z"
},
{
"tag": "1.4.1",
"kind": "patch",
"published_at": "2023-11-12T00:26:12Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2023-11-10T04:42:11Z"
},
{
"tag": "1.3.1",
"kind": "patch",
"published_at": "2023-09-10T21:41:38Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2023-06-10T20:12:34Z"
},
{
"tag": "1.2.1",
"kind": "patch",
"published_at": "2023-03-27T01:22:40Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2023-02-23T19:35:54Z"
},
{
"tag": "1.1.1",
"kind": "patch",
"published_at": "2023-02-05T22:51:42Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2022-10-24T15:39:53Z"
},
{
"tag": "1.0.5",
"kind": "patch",
"published_at": "2022-10-14T19:58:26Z"
},
{
"tag": "1.0.4",
"kind": "patch",
"published_at": "2022-10-13T14:28:28Z"
},
{
"tag": "1.0.3",
"kind": "patch",
"published_at": "2022-08-10T13:47:10Z"
},
{
"tag": "1.0.2",
"kind": "patch",
"published_at": "2022-08-04T05:46:25Z"
},
{
"tag": "1.0.1",
"kind": "patch",
"published_at": "2022-08-04T05:46:18Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2022-07-27T02:03:29Z"
},
{
"tag": "0.10.5",
"kind": "patch",
"published_at": "2022-04-04T10:39:08Z"
},
{
"tag": "0.10.4",
"kind": "patch",
"published_at": "2022-03-17T11:20:33Z"
},
{
"tag": "0.10.3",
"kind": "patch",
"published_at": "2022-03-17T11:20:21Z"
},
{
"tag": "0.10.2",
"kind": "patch",
"published_at": "2022-03-17T09:42:38Z"
},
{
"tag": "0.10.1",
"kind": "patch",
"published_at": "2022-03-16T17:37:28Z"
},
{
"tag": "0.10.0",
"kind": "minor",
"published_at": "2022-02-22T02:32:21Z"
}
],
"recent_commits": [
{
"oid": "2abc49eafca47730b5ec395c0f7c1b2e136312c5",
"body": "* perf(lexer): skip identifier and number runs\n\nOn the 3,057 KiB sample corpus, Wasm drops from 15,356.31 to 13,010.46 us per sweep on Node 18.20.8 (-15.28%) and from 11,724.34 to 9,856.69 us on Node 24.18.0 (-15.93%). The asm.js build drops from 15,934.34 to 12,945.57 us on Node 24.18.0 (-18.76%).\n\nThe fast path adds 379 raw / 105 gzip bytes to the full Wasm binary. Measurements used 1,500 warmup sweeps followed by 9 interleaved trials of 50 sweeps, dropping the best and worst trials.",
"is_bot": false,
"headline": "perf(lexer): skip identifier and number runs (#227)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-07-13T01:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b2e6209bac5c06c6ba457f9730014613e1128fb",
"body": null,
"is_bot": false,
"headline": "2.3.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-07-12T05:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c21b74b1f06dd739a000467a489bf71927f63ce",
"body": "* perf(lexer): gate keywordStart on the next byte for i/c tokens\n\nThe main character loop calls keywordStart() (and through it a second\nboundary helper) on every `i` and `c` it reaches, but over real-world\nsources the next byte rules the token out ~98% of the time for `i` and\n~95% for `c`. Checking \n[…]\nyte, so the\nmemcmp only needs \"ass\". Slice &LASS[1] (LASS stays for the two\nnon-fast-path class checks). -4 bytes, no extra instructions.\n\n---------\n\nCo-authored-by: Guy Bedford <guybedford@gmail.com>",
"is_bot": false,
"headline": "perf(lexer): gate keywordStart on the next byte for i/c tokens (#223)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-07-12T02:05:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8f9d89f9d2978d755ec48e23884b4ac9597663f",
"body": null,
"is_bot": false,
"headline": "perf: fast native UTF-16 source copy into Wasm memory on Node (#224)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-07-12T01:34:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbac1c30c269a4d608d680b549187a1b7a883515",
"body": null,
"is_bot": false,
"headline": "2.3.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-07-02T01:13:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3c972d9ded43c6b1f3503305fda7eb067ad7989",
"body": "…e readme (#219)\n\nThe minimal wasm build added in #211 predates the #217 memory growth fix\nand was missing -s ALLOW_MEMORY_GROWTH=1, so parse() on sources over ~4M\nchars threw \"Maximum memory size exceeded\" (the Large source test from\n#217 catches this under test:minimal:wasm).\n\nAlso documents the es-module-lexer/minimal build in the readme, and\ncorrects the stale comments claiming dynamic-import n / ip() are dropped\nin the minimal build: _ip is exported and read, only at/ss/f/ms go.",
"is_bot": false,
"headline": "fix: allow wasm memory growth in the minimal build, document it in th…",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-07-02T01:10:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9b611ea3ab4ae16c0be3cb77a611a0d92347a39",
"body": "The emsdk toolchain update in #203 dropped the growable memory the old\nfastcomp build emitted: the wasm memory was declared with\nmaximum == initial (258 pages / ~16MiB), so the unconditional\nmemory.grow() in parse() throws \"Maximum memory size exceeded\" for any\nsource over ~4M chars (stored as 4 bytes per char).\n\nAdd -s ALLOW_MEMORY_GROWTH=1 to restore growable memory, and a 5MB\nlarge source regression test.\n\nFixes #214",
"is_bot": false,
"headline": "fix: allow wasm memory growth for sources over ~4MB (#217)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-07-02T00:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c9042551ee19703f5a57d1101dfe7b500f60e99",
"body": "… (#211)\n\nAdds a LEXER_MIN build variant that drops the metadata es-module-shims\nnever reads, exposed as two new package entry points alongside the\nexisting full builds:\n\n- es-module-lexer/minimal -> dist/lexer.minimal.js (wasm)\n- es-module-lexer/minimal/js -> dist/lexer.minimal.asm.js (asm\n[…]\n to build/*.mjs; the full build is unchanged\n(byte-for-byte). The test suite runs against both variants (MINIMAL=1)\nwith min-only-field assertions gated; bench and footprint cover the full\n2x2 matrix.",
"is_bot": false,
"headline": "feat: add minimal build for es-module-shims (es-module-lexer/minimal)…",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-07-02T00:52:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "70010fbc53b485c938d7bd45c1f95b1cf5a73a83",
"body": "* docs: correct stale limitations and gzip size in README\n\nTwo README claims no longer match the shipped library:\n\n1. The Limitations section says `export var a = 'asdf', q = z` only detects\n `a` and `export var { a: b } = asdf` misses `b`. Both are detected\n correctly in current releases. Repla\n[…]\nure is about half the current size. All three\n published builds (lexer.js, lexer.cjs, lexer.asm.js) gzip to ~8 KiB.\n\n* Update README.md\n\n---------\n\nCo-authored-by: Guy Bedford <guybedford@gmail.com>",
"is_bot": false,
"headline": "docs: correct stale limitations and gzip size in README (#212)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-06-30T05:49:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f1949411c9e8b2726bb5f99b77952142833ea5c",
"body": null,
"is_bot": false,
"headline": "2.2.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-06-29T05:10:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d61e97a651b595453bc52c32c5485832771bdbb3",
"body": "Exports exposed only the exported and local name ranges, so a consumer could\nnot locate the `export` keyword introducing a binding. Each export specifier\nnow carries `ss`, the statement start, matching the import `ss`. Only the\nstatement start is tracked, not its end.\n\nFixes: https://github.com/guybedford/es-module-lexer/issues/112",
"is_bot": false,
"headline": "feat: expose export statement start position as ss (#206)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-06-28T22:33:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "064d0db2f65e5e0fef3c0cfbea04cebb1cdf03dd",
"body": "* fix: detect every binding in export var/let/const declarations\n\nA multi-declarator export reported only the first binding:\n`export const a = 1, b = 2` yielded `a`, never `b` - the initializer scanner\nstopped at the first declarator instead of skipping each initializer to its\nseparating comma.\n\nski\n[…]\ninitializer or a destructuring default is detected.\n4. A numeric or BigInt property key such as `{ 0.5: b }` is consumed whole.\n\n* fixups\n\n---------\n\nCo-authored-by: Guy Bedford <guybedford@gmail.com>",
"is_bot": false,
"headline": "fix: detect every binding in export var/let/const declarations (#199)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-06-28T22:17:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "99b522697da26b50964a34355f5db2d52162796c",
"body": "…port (#207)",
"is_bot": false,
"headline": "fix: don't treat a method named `import` with 2+ args as a dynamic im…",
"author_name": "Michael Sober",
"author_login": "soberm",
"committed_at": "2026-06-28T20:50:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa1ade647b474b10e5149480b31e9269baefb2dc",
"body": "…y from the build (#203)",
"is_bot": false,
"headline": "build: update to upstream emsdk toolchain and derive asm.js dictionar…",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-06-21T22:24:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "025973941b4e0fad14144b60b73621247ea2f589",
"body": "* fix: report n for no-substitution template dynamic imports\n\nA dynamic import whose specifier is a no-substitution template literal\n(import(`./x.js`)) returned n: undefined, while the quoted forms returned the\nspecifier. A template with no ${...} is a constant string, so it now records a\nsafe speci\n[…]\nbstitution template threw a parse error on the asm.js build while\nWASM and the JS fallback decoded it. Apply the same backtick exception.\n\n---------\n\nCo-authored-by: Guy Bedford <guybedford@gmail.com>",
"is_bot": false,
"headline": "fix: report n for no-substitution template dynamic imports (#201)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-06-21T00:17:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a679e8d82ab6cc5729ace0e0f6a658a72e20a70",
"body": "* build(deps-dev): update dev dependencies to latest\n\nThe TypeScript and mocha majors each break a build step unless paired with a\nchange here:\n\n1. `build:types` errored on `Buffer` — TypeScript 6 no longer auto-includes\n @types/node for a file passed on the tsc command line, so the call now\n pa\n[…]\ndropped the bdd `beforeEach`, so its two hooks use the\n tdd `setup` alias.\n\n* fix(bench): update kleur to v4 function-call chaining API\n\n---------\n\nCo-authored-by: Guy Bedford <guybedford@gmail.com>",
"is_bot": false,
"headline": "build(deps-dev): update dev dependencies to latest (#200)",
"author_name": "Ruben Bridgewater",
"author_login": "BridgeAR",
"committed_at": "2026-06-21T00:11:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5fb11e1e01ef8d454829ce6e6f8f6cf102d82d8a",
"body": null,
"is_bot": false,
"headline": "2.1.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-04-25T22:49:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc29c5bca18d715f81f7592b3c5fe18f9abf24b9",
"body": "Disambiguate `of` as identifier vs for-of contextual keyword inside\n`for (...)` by checking whether `of` actually follows a binding (the\nonly place the for-of keyword can appear). In valid JS a binding always\nends with an identifier-tail char, ']', '}', or ')' — anything else\nmeans `of` is just an i\n[…]\nwhich only excluded ';' and\n'=', missing '+', '-', '*', ',', '<', '|', '&', '?', etc.) and also\nhandles tab/newline whitespace and the no-space-before-of cases like\n`for ([x]of /regex/)`.\n\nFixes #188.",
"is_bot": false,
"headline": "fix: handle new of conflict cases (#195)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2026-04-25T21:23:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a351384ffa8c458d9c2a665978247b041ab94b8",
"body": null,
"is_bot": false,
"headline": "Always exclude dyn import attributes from specifier range (#197)",
"author_name": "Nicolò Ribaudo",
"author_login": "nicolo-ribaudo",
"committed_at": "2026-04-25T20:30:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0603c6fa75622e4577c60748f4d2ef8aeb852144",
"body": null,
"is_bot": false,
"headline": "2.0.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2025-12-07T08:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "066ce56cec8cf2a5aff4f3753ce8c08f0b334154",
"body": null,
"is_bot": false,
"headline": "feat: support import attribute item parsing (#194)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2025-12-07T08:33:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd6f6ab0991912b18940826c10921740651997b6",
"body": null,
"is_bot": false,
"headline": "breaking: remove import assertions (#191)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2025-12-07T07:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e21f663dd679a23da15103cbe826fc01b42524fe",
"body": null,
"is_bot": false,
"headline": "fix: global reference (#193)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2025-12-07T07:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dceaab846b11fbd77b39056088a734d9f774b070",
"body": null,
"is_bot": false,
"headline": "1.7.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2025-04-22T22:19:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "880c30a1ef4bb780c0485678470a3e7793dc4a9a",
"body": null,
"is_bot": false,
"headline": "feat: support import defer syntax (#187)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2025-04-22T22:16:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35221ed37903ab44e74a11426f160648781862ac",
"body": null,
"is_bot": false,
"headline": "1.6.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-12-26T16:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abb62e294868e0d8ef229d163a4d30b2b57cf4ff",
"body": null,
"is_bot": false,
"headline": "feat: implement `initSync` (#185)",
"author_name": "Sukka",
"author_login": "SukkaW",
"committed_at": "2024-12-26T16:05:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "765927c4265f3335b4eec98c82ee15d946626745",
"body": null,
"is_bot": false,
"headline": "Update README.md for types info (#182)",
"author_name": "Yao Ding",
"author_login": "yaodingyd",
"committed_at": "2024-10-25T19:01:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57e92af52d9b717da65d22740de3ee76ccdde911",
"body": null,
"is_bot": false,
"headline": "fix: typo (#180)",
"author_name": "godky",
"author_login": "godky",
"committed_at": "2024-09-06T03:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "763a9cd051c057c75d5860b726e9087e5ceb79ac",
"body": null,
"is_bot": false,
"headline": "fix: add exports type for lexer.asm.js (#179)",
"author_name": "阿豪",
"author_login": "ahaoboy",
"committed_at": "2024-07-10T01:39:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d70de9b010a7664a4b52859834f1fe3064e12c1c",
"body": null,
"is_bot": false,
"headline": "1.5.4",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-06-24T05:04:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f481347167b268e0f4e2852c09541bbd8e10f2e",
"body": null,
"is_bot": false,
"headline": "fix: of keyword context in for statement only (#178)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-06-24T05:04:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc43bd7fd0d2557649e45a208f9d20107c20f687",
"body": null,
"is_bot": false,
"headline": "1.5.3",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-05-17T19:19:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c1fac880422b9582eef6e146b093225656d4f48",
"body": null,
"is_bot": false,
"headline": "fix: handling of of keyword (#174)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-05-17T19:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3a60c30386d1bd54fc531595f7e7124c748d71d",
"body": null,
"is_bot": false,
"headline": "1.5.2",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-04-27T22:13:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "492a0aa27e8d25006f9818df2a44f80ff3606a61",
"body": null,
"is_bot": false,
"headline": "fix: import type definitions (#172)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-04-27T22:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c565b83537954f8dc7ad64487d71579bfaef8fbd",
"body": null,
"is_bot": false,
"headline": "1.5.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-04-27T21:16:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c40904031f6ec4d40a2b4fd94f318a6f38dec60",
"body": null,
"is_bot": false,
"headline": "fix regex case of (#171)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-04-27T21:15:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "864ca9d5a803d2fb9f6415ca8ee626d73fef0c96",
"body": null,
"is_bot": false,
"headline": "1.5.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-03-25T21:02:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaa7e3c957b58db2b4aa639cb90694a6afa70dd5",
"body": null,
"is_bot": false,
"headline": "Source phase imports (#168)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-03-25T21:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f44438cbda869d898194e985c3780abf0e08b2cf",
"body": null,
"is_bot": false,
"headline": "1.4.2",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2024-03-19T04:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d78f7d4127e09574f202e642973d8b8d0f959dc7",
"body": null,
"is_bot": false,
"headline": "fix: handle regexp as default export (#167)",
"author_name": "Francesco Pipita",
"author_login": "fpipita",
"committed_at": "2024-03-19T04:16:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c357368bd4681011bc938ec54d48b2c6a969672b",
"body": null,
"is_bot": false,
"headline": "1.4.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-11-12T00:25:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eeee5b6f12109af28fa87c9fc7e4a1216462375",
"body": null,
"is_bot": false,
"headline": "fix: ignore dynamic import for has ESM syntax (#164)",
"author_name": "翠 / green",
"author_login": "sapphi-red",
"committed_at": "2023-11-12T00:24:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2969eddeb805caafc9cbd05d29097f663d834ad",
"body": null,
"is_bot": false,
"headline": "1.4.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-11-10T04:41:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2911914790319f2f239ae266e017513bd629099a",
"body": "* feat: skip trailing white space in dynamic import\r\n\r\n* test: add more test cases",
"is_bot": false,
"headline": "feat: skip trailing white space in dynamic import (#162)",
"author_name": "翠 / green",
"author_login": "sapphi-red",
"committed_at": "2023-11-10T04:40:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d41c1c8959dc3bf8cc0edf8f089e913e07429494",
"body": null,
"is_bot": false,
"headline": "feat: ESM detection support (#160)",
"author_name": "翠 / green",
"author_login": "sapphi-red",
"committed_at": "2023-11-09T17:34:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39d8ae3c70ce9427f4da6c1f2e764c184c120c7f",
"body": null,
"is_bot": false,
"headline": "types: add ParseError type (#161)",
"author_name": "翠 / green",
"author_login": "sapphi-red",
"committed_at": "2023-11-09T17:31:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "605184a98713afdd6f3a16d5004c6a9fec136f5f",
"body": null,
"is_bot": false,
"headline": "1.3.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-09-10T21:40:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "842c16c8ed24f73a73c855b6887b97163703a50e",
"body": null,
"is_bot": false,
"headline": "fix: dynamic import paren ranges (#157)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-09-10T21:38:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44ad4ae1f5493a6956e226668008c9b2cd7f3fd",
"body": null,
"is_bot": false,
"headline": "1.3.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-06-10T20:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "224531c27529c54101e90b1245cf2028e5ee5c4a",
"body": "* feat: simple destructuring support\r\n\r\n* handle more variations\r\n\r\n* fixup",
"is_bot": false,
"headline": "feat: simple destructuring support (#154)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-06-10T20:10:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36ce8f0162c435b722f16c2a41804ce4a76470d5",
"body": null,
"is_bot": false,
"headline": "types: note variations",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-04-08T01:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "992d35da712a7a37af165114a564775e412e90ed",
"body": null,
"is_bot": false,
"headline": "1.2.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-03-27T01:22:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a299a82e46cd6bb76bb70059cc03646a235d87c",
"body": null,
"is_bot": false,
"headline": "feat: import attributes support (#150)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-03-27T01:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4e89f6879d02e08572eb534754ac7bc384ac3aa",
"body": null,
"is_bot": false,
"headline": "1.2.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-02-23T19:28:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24f85fb18ba0efc75e9b215f4c109165aa136840",
"body": null,
"is_bot": false,
"headline": "fix: default export cases (#149)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-02-23T19:26:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82c3db65e787e9ba993f4a1cc064bed8ac60dda1",
"body": null,
"is_bot": false,
"headline": "1.1.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-02-05T22:49:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3d99bf6c1c4504312d9f590d2a9dd0e2a31ccd8",
"body": null,
"is_bot": false,
"headline": "fix: import.meta detection in spread (#146)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-02-05T22:44:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "389efb166567bebaad106d2bbdc50aa08cea4c27",
"body": null,
"is_bot": false,
"headline": "Exports update (#136)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2023-02-05T22:39:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df0dab401f7037f40974a13acc62719bc9cce69d",
"body": null,
"is_bot": false,
"headline": "1.1.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-10-24T15:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af92f0d375f177edb45ae0a3bca383752ce0ed77",
"body": null,
"is_bot": false,
"headline": "fix: default export detections (#141)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-10-24T15:35:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a912ec6a93690be992e86246d67a3bc42f5470ed",
"body": null,
"is_bot": false,
"headline": "1.0.5",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-10-14T19:57:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "488a6ddd7c51ec9b307cd18463f19a7c5bbd0718",
"body": null,
"is_bot": false,
"headline": "fix: export default export name bug (#139)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-10-14T19:56:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3182898505689eb78fcd64351f200bc3dea886a",
"body": null,
"is_bot": false,
"headline": "1.0.4",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-10-13T14:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ec22206c8747deab06387324b3328d4ebbe4f3f",
"body": null,
"is_bot": false,
"headline": "feat: add local name for export default (#135)",
"author_name": "await-ovo",
"author_login": "await-ovo",
"committed_at": "2022-08-31T09:53:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7cb2d79986cc8f307212cc22f87bc69b8475b4f",
"body": null,
"is_bot": false,
"headline": "types: `types` entry to exports map. (#134)",
"author_name": "David Zearing",
"author_login": "dzearing",
"committed_at": "2022-08-29T11:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31028f4237e6eaeba0f43ad9139dbabca31263c4",
"body": null,
"is_bot": false,
"headline": "fix: Remove uint32_t point parameter from parse declaration (#131)",
"author_name": "Alexander Marks",
"author_login": "aomarks",
"committed_at": "2022-08-12T13:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c2e0941553d6d5acd0685eb81f03e1813f68602",
"body": null,
"is_bot": false,
"headline": "feat: convert Wasm bridge to TypeScript (#130)",
"author_name": "Alexander Marks",
"author_login": "aomarks",
"committed_at": "2022-08-11T15:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "427efdad265a477073b569a2a3b61e08a2795d61",
"body": null,
"is_bot": false,
"headline": "1.0.3",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-08-10T13:46:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d311848b85f03367d4eca594656c21d2aa6429b",
"body": null,
"is_bot": false,
"headline": "fix: import keyword brace (#129)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-08-10T13:45:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19ea3c4482f38e7a43e82cbc3974879bcf006b05",
"body": null,
"is_bot": false,
"headline": "1.0.2",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-08-04T05:45:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a151a13cea05bdee5371b8e4e587ac8741d1f1b5",
"body": null,
"is_bot": false,
"headline": "fix: class brace state bug (#128)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-08-04T05:45:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a28c3668119b538e18c459baf14e630bc27ff118",
"body": null,
"is_bot": false,
"headline": "1.0.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-28T01:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85eb74232f4a8eb31e798691af5448eb3ec0795a",
"body": null,
"is_bot": false,
"headline": "fix: break / continue statements before a regexp (#124)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-28T01:44:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d60738dcfef1bf6ed97e0bcb3d52e7c1eab4b238",
"body": null,
"is_bot": false,
"headline": "types: fixup ln typing examples",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-27T05:49:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ab9e6f1f9de972525bd20a97d63234a65c006e",
"body": null,
"is_bot": false,
"headline": "1.0.0",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-27T02:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f9bc48e487243168a038904414baa937dc9a970",
"body": null,
"is_bot": false,
"headline": "fix: reinstate js tests (#121)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-27T02:02:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f096028012a6baceb8aac2fa13128af40300bc28",
"body": null,
"is_bot": false,
"headline": "opt: minor refactoring for footprint, perf (#114)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-27T01:46:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20cb7fd10c9ece4f17c45097ecba7bacdc7275d1",
"body": null,
"is_bot": false,
"headline": "feat: [breaking] Improve exports analysis with ExportSpecifier (#119)",
"author_name": "tommie",
"author_login": "tommie",
"committed_at": "2022-07-27T01:32:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e9fd84723a98b50f44c23c40817f8a935ec734f",
"body": null,
"is_bot": false,
"headline": "ci: simplify",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-26T20:24:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f441e416bdec004d2f404e1ed321eeb210f43f3",
"body": null,
"is_bot": false,
"headline": "ci: fix CI (#120)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-07-26T20:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "559a550318fcdfe20c60cb322c147905b5aadf9f",
"body": null,
"is_bot": false,
"headline": "Delete FUNDING.yml",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-05-05T17:56:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c72922f6b4b8c9da6231fb88c0b6252edece1500",
"body": null,
"is_bot": false,
"headline": "Update GitHub Sponsors",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-05-05T17:47:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c17934a435fac7d515b29fcc022f3d61f973a84",
"body": null,
"is_bot": false,
"headline": "0.10.5",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-04-04T10:38:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "057b19f80c899151b070b094175b8ccffe202cde",
"body": null,
"is_bot": false,
"headline": "fix: fixed allocation calculation (#113)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-04-04T10:34:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df27d03b736f64c97ee78d306923401547556e89",
"body": null,
"is_bot": false,
"headline": "fix: chompfile, version inlining",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-31T20:50:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "303db3773503d9152460178bfdbbb325338d6523",
"body": null,
"is_bot": false,
"headline": "0.10.4",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-17T10:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef94edebd1ffa8288455a864d2af4e69feeac2fa",
"body": null,
"is_bot": false,
"headline": "fix: extend analysis memory limits (#111)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-17T10:46:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9143b7f32eb112d084262e74a4ce6540006956f7",
"body": null,
"is_bot": false,
"headline": "0.10.3",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-17T10:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6bb168fbeb9cc1442282f1993af671255b2ab74",
"body": null,
"is_bot": false,
"headline": "fix: asm.js allocations adjustments (#110)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-17T10:06:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ddb700b1102c63da32d469af7d05011e92d0281",
"body": null,
"is_bot": false,
"headline": "0.10.2",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-17T09:40:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78cbf2735d4007f8a94bdf6c9bf15c26c7900f96",
"body": null,
"is_bot": false,
"headline": "fix: asm.js memory allocations (#109)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-17T09:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b11f41aa1169acf13fe70809e4bbb2d7214927b",
"body": null,
"is_bot": false,
"headline": "0.10.1",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-16T14:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3170dd90470968da9a50280dc12328b1d1da5f61",
"body": null,
"is_bot": false,
"headline": "Fix: Memory limits in asm.js build (#107)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-16T14:28:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51cb2473df91507beb1728a6aa2b45959a870ce6",
"body": null,
"is_bot": false,
"headline": "update formatting",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-12T12:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d58db7cddcf725259703e9a10542746b9cc00c6",
"body": null,
"is_bot": false,
"headline": "add built with Chomp",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-12T12:08:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f0339f24e2e681ca8cd4cb7c97e49804e2bc14",
"body": null,
"is_bot": false,
"headline": "npm scripts migration path",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-03-12T12:04:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9edabd16ee1b3f72d95fa2d3907326728c67f00c",
"body": null,
"is_bot": false,
"headline": "feat: chomp action for faster CI (#104)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-02-24T04:52:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa9a653d80d168885b387c0987d97cbd3460dd51",
"body": null,
"is_bot": false,
"headline": "Chomp update (#103)",
"author_name": "Guy Bedford",
"author_login": "guybedford",
"committed_at": "2022-02-22T08:17:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 33,
"commits_last_year": 23,
"latest_release_at": "2026-07-12T05:19:04Z",
"latest_release_tag": "2.3.1",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 6,
"days_since_latest_release": 10,
"mean_days_between_releases": 89.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "es-module-lexer",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/es-module-lexer",
"is_deprecated": false,
"latest_version": "2.3.1",
"repository_url": "https://github.com/guybedford/es-module-lexer",
"versions_count": 75,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 479313413,
"first_published_at": "2019-08-08T03:48:06.967000Z",
"latest_published_at": "2026-07-12T05:18:29.628000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 57,
"stars": 1030,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2019-08-11",
"count": 1
},
{
"date": "2020-01-13",
"count": 1
},
{
"date": "2020-01-24",
"count": 1
},
{
"date": "2020-02-11",
"count": 1
},
{
"date": "2020-02-15",
"count": 1
},
{
"date": "2020-04-06",
"count": 1
},
{
"date": "2020-06-29",
"count": 1
},
{
"date": "2020-09-05",
"count": 1
},
{
"date": "2020-09-22",
"count": 1
},
{
"date": "2020-09-30",
"count": 1
},
{
"date": "2020-12-10",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2021-02-12",
"count": 1
},
{
"date": "2021-02-26",
"count": 1
},
{
"date": "2021-05-03",
"count": 1
},
{
"date": "2021-05-11",
"count": 1
},
{
"date": "2021-05-28",
"count": 1
},
{
"date": "2021-06-04",
"count": 1
},
{
"date": "2021-07-05",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-09-14",
"count": 1
},
{
"date": "2021-09-25",
"count": 2
},
{
"date": "2022-03-21",
"count": 1
},
{
"date": "2022-07-25",
"count": 1
},
{
"date": "2022-08-24",
"count": 1
},
{
"date": "2022-08-26",
"count": 1
},
{
"date": "2022-12-05",
"count": 1
},
{
"date": "2022-12-30",
"count": 2
},
{
"date": "2023-01-06",
"count": 1
},
{
"date": "2023-02-11",
"count": 1
},
{
"date": "2023-04-08",
"count": 1
},
{
"date": "2023-04-17",
"count": 1
},
{
"date": "2023-05-04",
"count": 1
},
{
"date": "2023-07-31",
"count": 1
},
{
"date": "2023-09-29",
"count": 1
},
{
"date": "2023-11-09",
"count": 1
},
{
"date": "2024-03-12",
"count": 1
},
{
"date": "2024-06-23",
"count": 1
},
{
"date": "2024-07-07",
"count": 1
},
{
"date": "2024-07-09",
"count": 1
},
{
"date": "2024-08-12",
"count": 1
},
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2024-10-25",
"count": 1
},
{
"date": "2024-12-07",
"count": 1
},
{
"date": "2024-12-14",
"count": 1
},
{
"date": "2025-02-18",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-12-06",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
}
],
"complete": true,
"collected": 55,
"total_forks": 57
},
"star_history": null,
"open_issues_and_prs": 15
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 902016,
"source_files_sampled": 16,
"oversized_source_files": 7,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 10,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@babel/cli",
"direct": false,
"version": "^7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/core",
"direct": false,
"version": "^7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-transform-modules-commonjs",
"direct": false,
"version": "^7.29.7",
"ecosystem": "npm"
},
{
"name": "@swc/cli",
"direct": false,
"version": "^0.8.1",
"ecosystem": "npm"
},
{
"name": "@swc/core",
"direct": false,
"version": "^1.15.41",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^25.9.3",
"ecosystem": "npm"
},
{
"name": "kleur",
"direct": false,
"version": "^4.1.5",
"ecosystem": "npm"
},
{
"name": "mocha",
"direct": false,
"version": "^11.7.6",
"ecosystem": "npm"
},
{
"name": "terser",
"direct": false,
"version": "^5.48.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^6.0.3",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 10,
"direct_count": 0,
"indirect_count": 10
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 106,
"open_issues": 7,
"closed_ratio": 0.928,
"closed_issues": 90,
"closed_unmerged_prs": 14
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "guybedford",
"commits": 217,
"avatar_url": "https://avatars.githubusercontent.com/u/598730?v=4"
},
{
"type": "User",
"login": "BridgeAR",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/8822573?v=4"
},
{
"type": "User",
"login": "richardo2016",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/6339390?v=4"
},
{
"type": "User",
"login": "LarsDenBakker",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/11994993?v=4"
},
{
"type": "User",
"login": "sapphi-red",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/49056869?v=4"
},
{
"type": "User",
"login": "aomarks",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/48894?v=4"
},
{
"type": "User",
"login": "FredKSchott",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/622227?v=4"
},
{
"type": "User",
"login": "marvinhagemeister",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1062408?v=4"
},
{
"type": "User",
"login": "xiaoxiangmoe",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/8111351?v=4"
},
{
"type": "User",
"login": "TomerAberbach",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/23299544?v=4"
}
],
"contributors_sampled": 26,
"top_contributor_share": 0.822
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 7,
"reason": "17 out of 23 merged PRs checked by a CI test -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 13/30 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 12 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "19 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "2abc49eafca47730b5ec395c0f7c1b2e136312c5",
"ran_at": "2026-07-22T16:37:04Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-13T01:02:27Z",
"oldest_open_prs": [
{
"number": 143,
"created_at": "2022-11-17T18:56:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 183,
"created_at": "2024-12-07T00:51:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 204,
"created_at": "2026-06-22T11:11:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 205,
"created_at": "2026-06-22T18:11:16Z",
"last_comment_at": "2026-07-04T20:49:43Z",
"last_comment_author": "guybedford"
},
{
"number": 215,
"created_at": "2026-07-01T14:01:06Z",
"last_comment_at": "2026-07-02T14:24:06Z",
"last_comment_author": "BridgeAR"
},
{
"number": 220,
"created_at": "2026-07-02T15:32:23Z",
"last_comment_at": "2026-07-13T01:14:22Z",
"last_comment_author": "guybedford"
},
{
"number": 222,
"created_at": "2026-07-06T12:50:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 228,
"created_at": "2026-07-20T19:37:35Z",
"last_comment_at": "2026-07-20T23:56:22Z",
"last_comment_author": "BridgeAR"
}
],
"last_merged_pr_at": "2026-07-13T01:00:31Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 76,
"created_at": "2021-06-24T10:46:23Z",
"last_comment_at": "2021-06-25T15:00:33Z",
"last_comment_author": "guybedford"
},
{
"number": 137,
"created_at": "2022-10-12T16:50:27Z",
"last_comment_at": "2022-10-13T14:22:44Z",
"last_comment_author": "guybedford"
},
{
"number": 147,
"created_at": "2023-02-20T07:06:18Z",
"last_comment_at": "2023-11-29T06:17:07Z",
"last_comment_author": "guybedford"
},
{
"number": 152,
"created_at": "2023-05-11T13:38:29Z",
"last_comment_at": "2023-05-14T20:02:59Z",
"last_comment_author": "guybedford"
},
{
"number": 155,
"created_at": "2023-07-31T17:19:46Z",
"last_comment_at": "2023-08-06T17:20:32Z",
"last_comment_author": "guybedford"
},
{
"number": 163,
"created_at": "2023-11-10T06:51:52Z",
"last_comment_at": "2026-06-07T03:14:18Z",
"last_comment_author": "jaydenseric"
},
{
"number": 218,
"created_at": "2026-07-02T01:08:03Z",
"last_comment_at": "2026-07-12T01:37:56Z",
"last_comment_author": "guybedford"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/guybedford/es-module-lexer",
"host": "github.com",
"name": "es-module-lexer",
"owner": "guybedford"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 50,
"vitality": 70,
"community": 69,
"governance": 70,
"engineering": 53
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 23,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "23 commits in the last year",
"points": 12.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 23
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "19 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 33,
"latest_release_tag": "2.3.1",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 89.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "33 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 33
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~89.5 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 89.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 9,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 9 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 9
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 69,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"forks": 57,
"stars": 1030,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1,030 stars",
"points": 48.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 1030
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "57 forks",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 57
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"es-module-lexer"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 479313413
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "479,313,413 downloads/month across npm",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 479313413,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 70,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 26,
"top_contributor_share": 0.822
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 82% of commits",
"points": 4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 82
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "26 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 26
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 12 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"merged_prs": 106,
"open_issues": 7,
"closed_issues": 90,
"issue_closed_ratio": 0.928,
"closed_unmerged_prs": 14
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "93% of issues closed",
"points": 43.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 93
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "106/120 decided PRs merged",
"points": 33.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 106,
"decided": 120
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 13/30 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 73,
"inputs": {
"followers": 1954,
"owner_type": "User",
"is_verified": null,
"owner_login": "guybedford",
"public_repos": 376,
"account_age_days": 5648
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,954 followers of guybedford",
"points": 23.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1954,
"login": "guybedford"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "376 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 376
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"es-module-lexer"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "75 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 75
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 53,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "17 out of 23 merged PRs checked by a CI test -- score normalized to 7",
"points": 14,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "17 out of 23 merged PRs checked by a CI test -- score normalized to 7",
"points": 1.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 13/30 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 12 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "19 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 30,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.63,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "63 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 33.6,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 63,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "at_risk",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 902016,
"source_files_sampled": 16,
"oversized_source_files": 7
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "7/16 source files over 60KB",
"points": 30.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 16,
"oversized": 7
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index npm:es-module-lexer@2.3.1; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T16:37:28.558983Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/guybedford/es-module-lexer.svg",
"full_name": "guybedford/es-module-lexer",
"license_state": "standard",
"license_spdx": "MIT"
}