公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-25 16:38 UTC

imazen / ultrahdr

Pure Rust Ultra HDR (gain map HDR) encoder/decoder

RustApache-2.0★ 16 星标⑂ 0 复刻始于 2026年1月在 GitHub 上查看 ↗

imazen/ultrahdr 的健康指数为 100 分中的 64 分,处于「中等」区间。 其得分最高的类别是Vitality(88/100),最低的是Community & Adoption(41/100)。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。

64
总分 / 100
中等

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 49(有风险)的上限。AI 就绪度不计入总体分。

64
优秀85-100堪称典范;基本满足所有检验标准
良好70-84健康;仅有轻微不足
中等50-69可接受,但存在明显不足;建议进行审查
存在风险30-49存在重大薄弱环节;采用时应保持审慎
危急1-29问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

Imazen组织
47 关注者220 个公开仓库始于 2012年5月

该仓库由组织支持——共同承担、可问责的托管责任,可延续于任何单一维护者之后。

软件包生态系统

注册表软件包版本月下载量版本数最近发布标签
crates.iowasm-bench0.2.032486 天前
crates.ioultrahdr-rs0.3.54938105 天前gainmaphdrimagejpegultrahdrencoding
crates.ioultrahdr-core0.6.05,068120 天前gainmaphdrimageno-stdultrahdrencoding

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

88优秀 · 占总体的 22%
评分方式
36/36推送新近度 — 最近一次推送于 0 天前
15.9/36提交节奏 — 52 周中有 23 周有提交
18/18提交量 — 最近一年 294 次提交
10/10OpenSSF Scorecard:Maintained — 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year294
human_commit_share1
days_since_last_push0
active_weeks_last_year23

发布纪律

100优秀
评分方式
27/27有发布版本 — 已发布 9 个发布版本
36/36发布时效 — 最近一次发布版本于 0 天前
27/27发布节奏 — 约每 14.6 天发布一次
0/10OpenSSF Scorecard:Signed-Releases — 无数据
所用输入
releases_count9
latest_release_tagultrahdr-rs-v0.4.1
releases_from_tags
days_since_latest_release0
mean_days_between_releases14.6
已排除计分(无数据或不适用):OpenSSF Scorecard:Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

41存在风险 · 占总体的 18%
评分方式
19.1/60星标 — 16 个星标
0/25复刻 — 0 个复刻
0/15关注者 — 1 位关注者
所用输入
forks0
stars16
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

50中等
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(Apache-2.0)
0/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
has_contributing
has_issue_template
has_code_of_conduct
has_pull_request_template
评分方式
49.9/80月度下载量 — crates 合计每月 5,564 次下载
0/20注册表被依赖数 — 该生态系统不报告此项
所用输入
packageswasm-bench, ultrahdr-rs, ultrahdr-core
dependents
ecosystemscrates
total_downloads23,304
monthly_downloads5,564
已排除计分(无数据或不适用):注册表被依赖数。 其余权重已重新归一化。

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

56中等 · 占总体的 24%
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0/22.5提交分布 — 头号贡献者编写了 100% 的提交
1.4/13.5贡献者广度 — 1 位贡献者
3/10OpenSSF Scorecard:Contributors — project has 1 contributing companies or organizations -- score normalized to 3
所用输入
bus_factor1
contributors_sampled1
top_contributor_share1
评分方式
36/46.8议题解决 — 77% 的议题已关闭
24.2/38.3PR 接受 — 已裁定的 PR 中 12/19 已合并
0/15OpenSSF Scorecard:Code-Review — Found 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs12
open_issues3
closed_issues10
issue_closed_ratio0.769
closed_unmerged_prs7
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
12.1/25所有者影响力 — imazen 有 47 位关注者
25/25既往记录 — 220 个公开仓库,账户约 14 年
所用输入
followers47
owner_typeOrganization
is_verified
owner_loginimazen
public_repos220
account_age_days5,177
评分方式
25/25已发布且可解析 — crates 上有 3 个软件包
35/35发布时效 — 最近一次发布于 0 天前
20/20版本历史 — 12 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packageswasm-bench, ultrahdr-rs, ultrahdr-core
ecosystemscrates
any_deprecated
min_days_since_publish0

工程质量

基础的工程与文档实践是否到位?

71良好 · 占总体的 20%

工程实践

68中等
评分方式
24/24CI 工作流 — 3 个工作流
24/24存在测试
0/16Linter 配置
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard:CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config

文档

75良好
评分方式
30/30README
25/25文档目录
0/15文档 / 主页站点
10/10仓库描述
0/10主题标签
10/10Wiki
所用输入
topics
has_wiki
homepage
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

57中等 · 占总体的 16%

安全态势

46存在风险
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
5/5Fuzzing — project is fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — 无数据
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — 无数据
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate4.6
已排除计分(无数据或不适用):packaging, signed_releases。 其余权重已重新归一化。
评分方式
35/35直接依赖不含已知公告 — 没有直接依赖携带已知公告
0/25间接依赖不含已知公告 — 在此范围内,传递依赖集合无法与开发和测试依赖区分
0/40没有长期未处理的公告 — 没有公告带有发布日期
所用输入
sourceosv
advisories1
affected_packages1
assessed_packages83
unassessed_packages22
affected_by_severityunknown 1
direct_affected_packages0
已排除计分(无数据或不适用):间接依赖不含已知公告, 没有长期未处理的公告。 其余权重已重新归一化。 已将 83 个已解析依赖与 OSV 比对。 有 22 项无法评估——没有已解析的版本、生态系统不受支持,或超出所报告的软件包清单。 该仓库未发布任何索引可解析的软件包,因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起,因此仅对声明的运行时依赖计分;传递性发现仅作为背景信息列出,不计入评分。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?这是一枚独立的实验性徽章——权重为 0.0,因此单独呈现,不影响总体健康评分。

70良好 · 占总体的 0%
评分方式
45/45代理指令 — CLAUDE.md
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 100 次人类提交中有 100 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share1
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes7,806
评分方式
18/18一条命令的引导启动 — justfile
22/22自动化测试
0/11Lint / 格式化配置
11/11静态类型检查 — Rust(静态类型)
10/10可复现环境 — Dockerfile, lockfile
0/10已体现的代理实践 — 最近 100 次提交中没有代理编写的提交
0/8自动化维护 — 未观察到自动依赖更新
0/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
所用输入
has_nix
has_tests
lockfilesCargo.lock
has_dockerfile
typed_language
bootstrap_filesjustfile
has_devcontainer
has_linter_config
typecheck_configs
agent_commit_share0
toolchain_manifestsCargo.toml, apidoc/Cargo.toml, fuzz/Cargo.toml, ultrahdr-core/Cargo.toml, ultrahdr-rs/Cargo.toml, wasm-bench/Cargo.toml
dependency_bot_commit_share0
评分方式
45/45可类型检查的代码 — Rust(静态类型)
52/55可控的文件大小 — 采样的 55 个源文件中有 3 个超过 60KB
所用输入
primary_languageRust
largest_source_bytes84,160
source_files_sampled55
oversized_source_files3

机器可读接口

40存在风险
评分方式
0/40API 模式(OpenAPI/GraphQL/proto)
0/20MCP 服务器
40/40可运行示例 — examples
所用输入
example_dirsexamples
has_mcp_signal
api_schema_files

关键数据

16GitHub 星标
1贡献者
294最近 12 个月提交数
0距最近推送天数
9发布版本数
1巴士系数(bus factor)
3开放议题
crates.io软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch crates package 'ultrahdr-apidoc' from its registry

更多细节

OpenSSF Scorecard 4.6 / 10
4.6综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-25 16:38 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
10Fuzzingproject is fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
不适用Packagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
直接依赖 26
注册表软件包版本约束清单文件
crates.iozenutils-apidoc0.1.0apidoc/Cargo.toml
crates.ioenough0.4ultrahdr-core/Cargo.toml
crates.iohalf2.7ultrahdr-core/Cargo.toml
crates.ioarchmage0.9.16ultrahdr-core/Cargo.toml
crates.iomagetypes0.9.16ultrahdr-core/Cargo.toml
crates.iobytemuck1.14ultrahdr-core/Cargo.toml
crates.iothiserror2.0ultrahdr-core/Cargo.toml
crates.iowhereat0.1.5ultrahdr-core/Cargo.toml
crates.iolinear-srgb0.6.12ultrahdr-core/Cargo.toml
crates.iozenpixelsultrahdr-core/Cargo.toml
crates.iozencodecultrahdr-core/Cargo.toml
crates.iozentone0.1.0ultrahdr-core/Cargo.toml
crates.iozenresizeultrahdr-core/Cargo.toml
crates.iozenpixels-convert0.2.15ultrahdr-core/Cargo.toml
crates.ioultrahdr-coreultrahdr-rs/Cargo.toml
crates.iomoxcmsultrahdr-rs/Cargo.toml
crates.ioimgrefultrahdr-rs/Cargo.toml
crates.iorgbultrahdr-rs/Cargo.toml
crates.iobytemuckultrahdr-rs/Cargo.toml
crates.iothiserrorultrahdr-rs/Cargo.toml
crates.iowhereat0.1.5ultrahdr-rs/Cargo.toml
crates.ioenoughultrahdr-rs/Cargo.toml
crates.iozenjpegultrahdr-rs/Cargo.toml
crates.iozencodecultrahdr-rs/Cargo.toml
crates.iozenpixelsultrahdr-rs/Cargo.toml
crates.ioultrahdr-corewasm-bench/Cargo.toml
全部依赖 105

来自 GitHub 依赖图的完整解析依赖集合:26 个直接依赖与 79 个间接(传递)软件包。仓库提交锁文件时,传递闭包才是完整的。

注册表软件包版本关系
crates.ioarchmage直接
crates.ioarchmage0.9.26直接
crates.iobytemuck直接
crates.iobytemuck1.25.0直接
crates.ioenough直接
crates.ioenough0.4.4直接
crates.iohalf直接
crates.iohalf2.7.1直接
crates.ioimgref1.12.2直接
crates.iolinear-srgb直接
crates.iolinear-srgb0.6.12直接
crates.iomagetypes直接
crates.iomagetypes0.9.26直接
crates.iomoxcms0.8.1直接
crates.iorgb0.8.53直接
crates.iothiserror直接
crates.iothiserror2.0.18直接
crates.ioultrahdr-core0.5.0直接
crates.iowhereat直接
crates.iowhereat0.1.5直接
crates.iozencodec0.1.22直接
crates.iozenpixels0.2.13直接
crates.iozenpixels-convert直接
crates.iozenpixels-convert0.2.13直接
crates.iozentone直接
crates.iozenutils-apidoc0.1.1直接
crates.ioaligned-vec0.6.4间接
crates.ioalmost-enough0.4.4间接
crates.ioarbitrary1.4.2间接
crates.ioarchmage-macros0.9.26间接
crates.ioautocfg1.5.1间接
crates.iobytemuck_derive1.10.2间接
crates.iocc1.2.64间接
crates.iocfg-if1.0.4间接
crates.iocodec-corpus间接
crates.ioconsole0.15.11间接
crates.ioconsole_error_panic_hook间接
crates.iocriterion间接
crates.iocrunchy0.2.4间接
crates.ioencode_unicode1.0.0间接
crates.ioequator0.4.2间接
crates.ioequator-macro0.4.2间接
crates.iofind-msvc-tools0.1.9间接
crates.iogarb0.2.8间接
crates.iogetrandom间接
crates.iogetrandom0.3.4间接
crates.iohashbag0.1.13间接
crates.ioitoa1.0.18间接
crates.iojobserver0.1.34间接
crates.iolibc0.2.186间接
crates.iolibfuzzer-sys0.4.13间接
crates.iolibm0.2.16间接
crates.iomemchr2.8.2间接
crates.ionum-traits0.2.19间接
crates.ioonce_cell1.21.4间接
crates.iopaste1.0.15间接
crates.ioproc-macro21.0.106间接
crates.ioproptest间接
crates.iopublic-api0.52.1间接
crates.iopxfm0.1.29间接
crates.ioquote1.0.45间接
crates.ior-efi5.3.0间接
crates.iorustdoc-types0.57.3间接
crates.iorustup-toolchain0.1.10间接
crates.iorustversion1.0.22间接
crates.iosafe_arch1.0.0间接
crates.iosafe_unaligned_simd0.2.5间接
crates.ioserde1.0.228间接
crates.ioserde_core1.0.228间接
crates.ioserde_derive1.0.228间接
crates.ioserde_json1.0.150间接
crates.ioshlex2.0.1间接
crates.iosimilar2.7.0间接
crates.iosimilar-asserts1.7.0间接
crates.iosnapshot-testing0.1.8间接
crates.iosyn2.0.117间接
crates.iotempfile间接
crates.iothiserror-impl2.0.18间接
crates.iotinyvec1.11.0间接
crates.iotinyvec_macros0.1.1间接
crates.iounicode-ident1.0.24间接
crates.iowasip21.0.4+wasi-0.2.12间接
crates.iowasm-bindgen间接
crates.iowasm-bindgen-test间接
crates.iowhich间接
crates.iowide1.5.0间接
crates.iowinarm-cpufeatures0.1.2间接
crates.iowindows-sys0.59.0间接
crates.iowindows-targets0.52.6间接
crates.iowindows_aarch64_gnullvm0.52.6间接
crates.iowindows_aarch64_msvc0.52.6间接
crates.iowindows_i686_gnu0.52.6间接
crates.iowindows_i686_gnullvm0.52.6间接
crates.iowindows_i686_msvc0.52.6间接
crates.iowindows_x86_64_gnu0.52.6间接
crates.iowindows_x86_64_gnullvm0.52.6间接
crates.iowindows_x86_64_msvc0.52.6间接
crates.iowit-bindgen0.57.1间接
crates.iozenanalyze0.2.0间接
crates.iozerocopy0.8.52间接
crates.iozerocopy-derive0.8.52间接
crates.iozmij1.0.21间接
crates.iozune-core间接
crates.iozune-image间接
crates.iozune-jpeg间接
依赖安全公告 1

该仓库未发布可被索引解析的包,因此评估的是其自身的依赖图——共 83 个包,其中也包含从不交付的开发与测试版本固定:1 个存在已知公告,0 个为直接依赖。 有 22 个无法评估——没有已解析的版本、生态系统不受支持,或不在所列包清单之内。

软件包版本关系严重程度公告数修复版本
paste1.0.15间接未知1

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1222,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Just": 2965,
        "Rust": 749533,
        "Shell": 24253,
        "Dockerfile": 2729
      },
      "pushed_at": "2026-07-24T19:29:48Z",
      "created_at": "2026-01-13T22:49:04Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-25T15:05:33Z",
      "description": "Pure Rust Ultra HDR (gain map HDR) encoder/decoder",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust"
      ]
    },
    "owner": {
      "blog": "http://imazen.io",
      "name": "Imazen",
      "type": "Organization",
      "login": "imazen",
      "company": null,
      "location": "United States of America",
      "followers": 47,
      "avatar_url": "https://avatars.githubusercontent.com/u/1761920?v=4",
      "created_at": "2012-05-22T01:08:03Z",
      "is_verified": null,
      "public_repos": 220,
      "account_age_days": 5177
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "ultrahdr-rs-v0.4.1",
          "kind": "other",
          "published_at": "2026-07-24T19:30:08Z"
        },
        {
          "tag": "ultrahdr-core-v0.6.0",
          "kind": "other",
          "published_at": "2026-07-24T19:30:07Z"
        },
        {
          "tag": "ultrahdr-core-v0.5.0",
          "kind": "other",
          "published_at": "2026-04-26T22:58:40Z"
        },
        {
          "tag": "ultrahdr-rs-v0.3.5",
          "kind": "other",
          "published_at": "2026-04-10T18:05:11Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-03-31T22:53:20Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-03-31T22:45:31Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-03-31T21:21:49Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-03-31T20:54:58Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-03-29T14:51:02Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "73ab3d27dff71d8828b29b800c85869738dfeb91",
          "body": "Drops the zenpixels/zenpixels-convert git-rev patches (both now publish\nat 0.2.16 on crates.io, satisfying the plain registry requirements\nalready declared: zenpixels \"0.2.14\", zenpixels-convert \"0.2.15\" -\nboth ^-compatible with 0.2.16). See issue #32.\n\nultrahdr-rs publishes as 0.4.1, not 0.4.0: the\n[…]\nagetypes\n0.9.28's load_8x8 API - a baseline-staleness tooling limitation, not a\nsignal about current code); the breaking changes here were already\nreviewed and documented in CHANGELOG.md when drafted.",
          "is_bot": false,
          "headline": "release: ultrahdr-core 0.6.0 + ultrahdr-rs 0.4.1",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-24T19:23:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bf9f145b016e6459250c984098c3ad0e431f2d82",
          "body": null,
          "is_bot": false,
          "headline": "docs(CLAUDE): link pre-existing Fuzz CI redness to tracking issue #32",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-23T12:08:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a04638eed4fc8a75ee8252685774b59dcb2a2aa",
          "body": "…overflow, guards)",
          "is_bot": false,
          "headline": "docs(CLAUDE): log issue #28 hardening session (limits, cancellation, …",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-23T11:58:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a86754c6d3a07d2ad4d7efcb3084cad66124090",
          "body": "…I snapshots (#28)\n\n- lib.rs: crate example is now compile-tested (no_run, real API incl.\n  new_with_limits) replacing the ignore'd bring-your-own-codec sketch;\n  new 'Resource limits & cancellation' crate-docs section.\n- README: 'Resource limits (untrusted input)' subsection with snippet under\n  th\n[…]\nOG: #28 entries (Added/Fixed) with commit hashes.\n- docs/public-api snapshots regenerated (just api-doc): +ResourceLimits,\n  +new_with_limits/resource_limits, +4 decode *_with_stop, +encode_with_stop.",
          "is_bot": false,
          "headline": "docs: resource-limits + cancellation docs, compile-tested example, AP…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-23T11:56:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "16818da22aaac1b6d35d77f03dc45d6cfbacd6a4",
          "body": "….rs)\n\n- icc.rs extract_icc_profile: .get()-guarded chunk-index reads replace the\n  ambient-length guard + direct indexing (truncated APP2 skips cleanly).\n- markers.rs parse_jpeg_segments: segment length + payload reads go through\n  data.get() so a lying length field can never index past the input.\n\n[…]\nks_exact(4) (no rgba[2] panic on a\n  trailing partial chunk; bounds checks elided).\n- libultrahdr_parity.rs: single-pattern match -> if let (clippy).\nSuite still 366 passing, ultrahdr-rs clippy clean.",
          "is_bot": false,
          "headline": "fix: index-guard hardening flagged in #28 (icc.rs, markers.rs, encode…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-23T11:54:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "306aa5dd34d91a93185997057a5b566566a1b339",
          "body": "- Decoder::decode_sdr_with_stop / decode_gainmap_with_stop /\n  decode_hdr_with_stop / decode_hdr_with_format_and_stop; plain methods\n  delegate with Unstoppable (behavior unchanged).\n- Encoder::encode_with_stop threads the token through gain-map compute and\n  both zenjpeg encodes (compute_gainmap + \n[…]\nside mapper).\n- Tests: pre-cancelled AlwaysStop token yields Error::Stopped from every\n  decode path and from encode; Unstoppable variants byte-identical to the\n  plain methods. 366 passing (was 363).",
          "is_bot": false,
          "headline": "feat: cooperative cancellation across Decoder/Encoder front doors (#28)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-23T11:52:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d1122cfd0ddc31648030181dbddc0f507151eed",
          "body": "…ths (#28)\n\n- New ResourceLimits (pixel cap default 500 MP = limits::MAX_TOTAL_PIXELS,\n  optional memory cap); caller caps clamp to the crate hard caps, never loosen.\n- Decoder::new_with_limits routes base-JPEG, gain-map-JPEG and HDR-output\n  paths through validate_ultrahdr_dimensions + caller caps:\n[…]\nMP SOF bomb rejected typed at header cost; caller pixel cap\n  rejects sdr+gainmap+hdr; memory cap rejects; valid input byte-identical\n  with/without limits; overflow unit tests. 363 passing (was 351).",
          "is_bot": false,
          "headline": "feat: Decoder::new_with_limits + ResourceLimits caps on all decode pa…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-23T11:47:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "05b257249117297973b5d5336ca575ac1ec81484",
          "body": "…0 migration\n\nzenjpeg 0.9.0 made decoding unconditional (67b0fbfc, 'drop no-op features'); the workspace.dependencies zenjpeg pin still requested features=['decoder'], which ultrahdr-rs/ultrahdr-core inherit via workspace=true. That broke Cargo resolution for any downstream on zenjpeg 0.9.0 (e.g. zenmetrics). Decoding still works — the feature is gone, not the functionality.",
          "is_bot": false,
          "headline": "fix: drop zenjpeg's removed decoder feature — completes the 0.8->0.9.…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-19T09:37:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b4272677253c6797b4fc14f1374f26d1eff56fe",
          "body": "…nomy)\n\nThe zenjpeg sibling pre-bumped to 0.9.0 (Pattern-B zencodec-taxonomy break,\nzenjpeg b03e7253) which broke every workspace resolving zenjpeg via this\nrepo's ^0.8 req (found via zenmetrics' zenhdr-corpus -> ultrahdr-rs chain).\nBump the req to 0.9.0 and mirror zenjpeg's own [patch.crates-io] ze\n[…]\n (rev c3220d51, the merged #99/#103 CategorizedError taxonomy) so both\nresolve ONE zencodec. TEMP: drop the pin + use the released version once\nzencodec 0.1.26 ships. cargo check -p ultrahdr-rs green.",
          "is_bot": false,
          "headline": "fix: zenjpeg dep 0.8 -> 0.9.0 + TEMP zencodec git pin (Pattern-B taxo…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-07-12T18:35:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44b6dd0752674387892f9cb2d01af35bb7e6fcfc",
          "body": "Adds a Feedback Log entry for the wide->magetypes / f16-opt-in refactor,\nand a Known Bugs section recording why the Fuzz workflow is pre-existing\nRED (sibling version skew in the standalone fuzz workspace: unpublished\nzenpixels-convert 0.2.15 + zentone 0.1.0-vs-0.2.0 trait mismatch in the\ntonemap target). Diagnosed while verifying this refactor did not regress\nFuzz; the real fix needs publishing decisions, not a code change.",
          "is_bot": false,
          "headline": "docs(CLAUDE): log wide/half refactor + document pre-existing red Fuzz CI",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-28T05:27:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e8bf606ef16d802e363872079005f5be8380e80",
          "body": "…ild passes\n\nThe `Documentation` CI job (`cargo doc -p ultrahdr-core --no-deps` with\n`RUSTDOCFLAGS=-D warnings`, default features) failed after the previous\ncommit gated `HdrOutputFormat::LinearF16` behind the default-off `f16`\nfeature: two intra-doc links to the now-absent variant became\n`unresolve\n[…]\nnks). The variant keeps its own doc; the\nreferences just are not clickable in the default build. Verified with\n`-D warnings` on default features (was failing, now clean) and\n`--all-features` (f16 on).",
          "is_bot": false,
          "headline": "fix(docs): un-link gated `LinearF16` intra-doc refs so default doc bu…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-28T04:52:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "708d68a59fddc1c3809d0de14519b7829b6e8761",
          "body": "… feature\n\nThe `wide` SIMD crate was declared in all three manifests but never\nreferenced — explicit SIMD is provided by `magetypes` (gainmap::apply_simd,\nbehind the `simd` feature) since that path was written. Removed it from the\nworkspace root and both member manifests.\n\nMade f16 support opt-in vi\n[…]\ni-spec / CHANGELOG. Verified: default `cargo test --workspace` (f16\noff) plus f16, simd, simd+f16, and no-default-features+f16 builds; clippy\nclean (the 286 warnings are pre-existing sibling zenjpeg).",
          "is_bot": false,
          "headline": "refactor: drop unused `wide` dep; gate f16/`half` behind opt-in `f16`…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-28T04:21:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d5b869a26fb1028aa8a8b14ad599d5f21eda20d",
          "body": "…not carry HEAD-state badges)",
          "is_bot": false,
          "headline": "docs: strip badges from crates.io README (version-locked page should …",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-28T01:24:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a52420b356f07f22d6d9459e2164104c2f594143",
          "body": null,
          "is_bot": false,
          "headline": "docs: README overhaul + split crates.io README",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-28T00:45:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f582dcd2537df0ac323c36b8484086cf273d4dc0",
          "body": "… release\n\nPre-publish prep. Author runs `cargo publish` after README verification per\nthe global CLAUDE.md rule; this commit just lands the API tightening, docs,\nREADME, and CHANGELOG work.\n\nVersion bumps (both crates need leading-digit bumps — the breaking changes\nare real and already merged, and \n[…]\nc,ffi-tests`\nall pass; the `__pixel-parity` tests still need Google's `ultrahdr_app` on\nPATH (CI-only, as documented). wasm32-unknown-unknown checks clean for both\ncrates with `--no-default-features`.",
          "is_bot": false,
          "headline": "prep(publish): audit ultrahdr-core + ultrahdr-rs API surface for next…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-23T15:12:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc0e12f4de8fd70b0fc65d60dc94d8e8b94985ef",
          "body": "The libultrahdr_rs crate (the Google libultrahdr C++ Rust binding,\npinned to the imazen fork at imazen/libultrahdr-rs@b820575b) was\nonly used by the optional ffi-tests feature for parity tests against\nthe C++ reference. Removing it gets the Google bindings fully out\nof the imazen ultrahdr path — the\n[…]\n+ from the imazen\nultrahdr-rs production path. The pure-Rust impl's correctness is\nverified via the corpus-based parity tests + the CI Gain Map Interop\nworkflow's subprocess-based pixel-parity matrix.",
          "is_bot": false,
          "headline": "chore: drop libultrahdr-rs FFI binding from ultrahdr-rs",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-23T14:37:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "602d21526af6d322a698fe7d10e74d609bd9a752",
          "body": "Wires the audited-winner HDR→SDR primitives from `zenpixels-convert`\n(BT.2446 Method A tone curve + `measure_max` peak measurement) into\nthe ultrahdr workspace and adds a one-call HDR→SDR display path.\n\nEmpirical basis: the 2026-06-22 audited HDR→SDR shootout (76 imazen-26\nsamples × 20 curves × 4 pe\n[…]\nnot committed per the task spec.\n\nOut of scope\n- zentone Reinhard re-exports stay (a separate agent handles\n  deprecation).\n- Gain-map compute path not modified — only the tonemap convenience\n  layer.",
          "is_bot": false,
          "headline": "feat(ultrahdr): wire Bt2446A + measure_max; Decoder::decode_full_sdr",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-23T14:27:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5461cc3626d3a9f08b4f6f90f023cd95c4b6a4e",
          "body": "…te anchor\n\napply_gainmap now sets ColorContext.diffuse_white = BT2408 (203 cd/m²) on\nits Linear (F32/F16) HDR output — every codec that reconstructs through it\n(heic/zenjpeg/zenavif/zenjxl) inherits the anchor, so a downstream PQ/HLG\nquantize reads the real SDR-white reference instead of assuming t\n[…]\nnded there) and zencodec 0.1.13 -> 0.1.23 (its ColorContext\nnon-exhaustive fix, needed for a consistent set against zenpixels 0.2.14).\nWorkspace builds; ultrahdr-core lib 165/0; new test pins the tag.",
          "is_bot": false,
          "headline": "feat(gainmap): tag reconstruction output with the BT.2408 diffuse-whi…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-18T21:53:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a804d89f7e4af90736c4fb594816368bcdc7abf5",
          "body": "…0.9.x)",
          "is_bot": false,
          "headline": "deps: widen moxcms to >=0.8.1,<0.10 (support crates.io 0.8.1 through …",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-18T03:20:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2b581d64a34f085b8e5d4ae36e79a05f5e8f003",
          "body": null,
          "is_bot": false,
          "headline": "docs: update references to renamed zenfleet-*/zenmetrics crates",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-18T02:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60b642f1a5aa5164fcc0a7e817c84792bc1e23c3",
          "body": "Instruments ultrahdr-core (and its in-repo consumer ultrahdr-rs) with the\nwhereat At<Error> pattern so decode/encode/gainmap errors carry a source\nlocation for production logs.\n\n- Result<T> alias -> Result<T, whereat::At<Error>> (the bare Error is unchanged,\n  so `#[from] ultrahdr_core::Error` keeps\n[…]\nrries At<Error>.\n\nVerified: ultrahdr-core 164/0 (pure error-plumbing, no behavior change),\nultrahdr-rs compiles + 181/0, no_std + std both build, clippy -D warnings clean,\napidoc snapshot regenerated.",
          "is_bot": false,
          "headline": "feat(error)!: whereat At<Error> for server-side stack traces (#31)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-16T06:52:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f9adf9b71a236b88caca7ef7733674078fff86b5",
          "body": null,
          "is_bot": false,
          "headline": "docs(readme): add error->HTTP-status example for servers",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-14T08:53:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba3aa63f94900b325db7606e08e01c108b01b4d2",
          "body": "…ct doc example crate name\n\ndecode.rs RGB/grayscale->RGBA Vec::with_capacity computed width*height*4 in u32\n(wraps for large/32-bit); now usize. Crate-level doc example used 'use ultrahdr::'\nbut the crate is ultrahdr_rs. Addresses parts of #28. cargo test -p ultrahdr-rs\n--lib: 35 passed.",
          "is_bot": false,
          "headline": "fix(ultrahdr-rs): usize math for RGBA capacity (u32 overflow) + corre…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-14T00:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eb5329c68f64c7eba936100f5acfa8e662a4915",
          "body": "…arser\n\nThe Apple binary-plist reader called Vec::with_capacity(count) with an\nuntrusted count for arrays/sets/dicts with no preceding length bound, and could\noverflow count*2 (UTF-16) / count*ref_size (dict vals_base), defeating the slice\nbound. Reservations are now capped by input length; the multiplies are checked.\nThe element loops already fail fast via read_ref on the first OOB reference, so\ncorrectness is unchanged. cargo test -p ultrahdr-core --lib: 164 passed.",
          "is_bot": false,
          "headline": "fix(ultrahdr-core): bound attacker-controlled allocations in bplist p…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-13T23:31:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "031d4a2070a522f82bd02aee712a2806a2c17bbd",
          "body": null,
          "is_bot": false,
          "headline": "build(deps): cargo update — refresh lockfiles",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-12T22:05:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10227198bb18af0d2f8238ec9dde3a240fc85836",
          "body": "FFI Parity Tests has been red on every push since 186cad9 ('degrade on MPF\nparse failure instead of aborting detection', 2026-06-11 10:22): that commit\nadded include_bytes!(\"images/mpf_first_attribute_xmp.jpg\") at\nultrahdr-rs/tests/decoder_robustness.rs:334, but the repo-root '*.jpg'\nignore rule sil\n[…]\nahdr-rs/tests/images/*.jpg' exception next to the existing\nfixture exceptions and track the file. decoder_robustness: 16/16 pass.\n\nNot caused by the api-doc migration (7a6276f); first red predates it.",
          "is_bot": false,
          "headline": "fix(ci): commit the gitignore-swallowed decoder_robustness MPF fixture",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-12T17:23:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3ac20f99d45e985e09f274fc07181b238385e703",
          "body": "…structHdr (heic#20)\n\nOne documented rounding route (f64 exp2 of the log2 headroom, rounded to\nf32 once, clamped >= 1.0) for 'reconstruct at the gain map's encoded\nmaximum'. The double-rounding powf(2, stops as f32) route can land 1 ULP\naway (corpus 1520: 0x40caa5da vs 0x40caa5db), which flipped 0.32% of PQ16\nsamples downstream; adapters that share this helper produce bit-identical\nreconstructions for the same parameters. ULP regression tests pin both\nroutes' bits.",
          "is_bot": false,
          "headline": "feat: full_reconstruction_boost — canonical f32 boost route for Recon…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-12T16:06:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a6276ffcd9054b71d6a792ca93860fa6a0b07c8",
          "body": "apidoc/ runner (zenutils-apidoc 0.1.0, workspace-excluded) replaces the\nin-crate ultrahdr-core/tests/public_api_doc.rs snapshot test. Carries the\nold test config: exclude_features(\"ultrahdr-rs\", [\"ffi-tests\"]) — the\nfeature only toggles dev/test deps (libultrahdr C++ parity harness) and\nits surface \n[…]\ntest-only),\njustfile recipes now cargo test --manifest-path apidoc/Cargo.toml,\napidoc/Cargo.lock committed (!apidoc/Cargo.lock gitignore negation).\n[patch.crates-io] / zenjpeg path-dep keys untouched.",
          "is_bot": false,
          "headline": "build(api-doc): migrate to the zenutils-apidoc runner package (CI-free)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T23:42:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2709b54d0037181c7530d0f2951dc98a5bb4069a",
          "body": "…xel scan (#27 follow-up)\n\nThe first #27 fix decided channel count by scanning decoded pixels for\nchroma. That is wrong for single-channel maps JPEG-coded as YCbCr: 4:2:0\nquantization leaves +/-1 chroma noise, the scan then promotes the map to\n3-channel, and apply_gainmap treats decode noise as per-\n[…]\n\noutput is unsupported; == false -> 3-channel RGB; no metadata -> full\nachromatic scan. Regression updated:\nsingle_channel_metadata_keeps_one_channel.\n\ncargo test -p ultrahdr-rs: 181 passed, 0 failed.",
          "is_bot": false,
          "headline": "fix(ultrahdr-rs): drive gain-map channel collapse by metadata, not pi…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T10:47:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b908c0db8d35c73bfae3ca971bdc368dc691724",
          "body": "Fixes #27. decode_gainmap requested grayscale output unconditionally:\nsome color-coded gain-map JPEGs failed outright ('unsupported color\nconversion' — the libavif seine sample, whose hdrgm metadata carries\ndistinct per-channel triples, died here even after #144/#26/#148 fixed\neverything upstream of\n[…]\nEncoder::set_gainmap_jpeg with a minted 4:4:4 color JPEG (asserts\n3 channels + chroma survival) and a minted grayscale JPEG (asserts\n1-channel collapse).\n\ncargo test --workspace: 352 passed, 0 failed.",
          "is_bot": false,
          "headline": "fix(ultrahdr-rs): decode RGB (multi-channel) gain maps (#27)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T10:42:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "186cad94f914aab6c85365501411c227f90c35ab",
          "body": "…tection\n\nFixes #26. Decoder::new propagated any MpfParse error, so a file whose MPF\nindex zenjpeg misreads (zenjpeg#148: valid big-endian MM index reported as\n'MPF declares zero images') failed construction entirely — every consumer\nsilently fell back to plain-JPEG SDR even though the primary XMP h\n[…]\n+\ndecoder_robustness::mpf_first_sample_detected_as_ultrahdr pinning\ndetection, exact hdrgm values (max 2.072094, headroom 2.300448), and\ngain-map decode.\n\ncargo test --workspace: 350 passed, 0 failed.",
          "is_bot": false,
          "headline": "fix(ultrahdr-rs): degrade on MPF parse failure instead of aborting de…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T10:22:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f01dddab503f717d342ea76cbe96952a39a07817",
          "body": null,
          "is_bot": false,
          "headline": "ci: cancel superseded runs via concurrency group [skip ci]",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T06:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3be9382f6ff1397aa9fb361c35425775181dda02",
          "body": null,
          "is_bot": false,
          "headline": "ci: cancel superseded runs via concurrency group [skip ci]",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T06:30:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fd59efd4a6413d65467e7a5a0ec6c5140a20d85",
          "body": null,
          "is_bot": false,
          "headline": "ci: cancel superseded runs via concurrency group [skip ci]",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T06:30:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "adf274a9dae53ff03f9891d02cec7fb14d1d4e6a",
          "body": null,
          "is_bot": false,
          "headline": "build: carry the zentone path patch into the fuzz workspace",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T04:14:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5527a239415356a9cbe6d933fe6942c8de0b3503",
          "body": "… patch)",
          "is_bot": false,
          "headline": "build: make the repo git-consumable (zentone via registry + workspace…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T02:46:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe28277da109a91f8907601bfbebc82244d80192",
          "body": null,
          "is_bot": false,
          "headline": "docs(api): conservative ablation reports for ultrahdr public surfaces",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-11T00:29:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0908181ca47e58e6a0e525c18c4bf09d9e3171a4",
          "body": "…st run\n\ndocs/public-api/<crate>.txt for both published crates, two sections each\n(default + all non-underscore features), regenerated by\nultrahdr-core/tests/public_api_doc.rs on every cargo test;\nZEN_API_DOC=check in the new dedicated ci.yml api-doc job, =off at\nworkflow level in ci/ffi-tests/gainm\n[…]\n\n\nPackaging gate verified empty for both crates (both exclude tests/;\nsnapshots live at repo root, outside the package dirs). serde_json\n1.0.150 dev-dep added to ultrahdr-core; Cargo.lock rides along.",
          "is_bot": false,
          "headline": "feat: versioned public-API surface snapshots, regenerated on every te…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-10T22:26:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4ab18d5810acac87b118fca4202f0f4fdf46c056",
          "body": "Parse Apple iOS MakerNote (0x21 HDRHeadroom, 0x30 HDRGain, 0x0a HDRImageType\nper exiftool Apple.pm) from EXIF TIFF bytes; compute HDR headroom via Apple\nstops formula; map to zencodec::GainMapParams. Minimal binary-plist reader.\nno_std+alloc, zero new deps. heic + zenraw both already depend on ultrahdr-core.",
          "is_bot": false,
          "headline": "feat(apple): MakerNote HDR headroom parser + bplist reader",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-10T04:47:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a45314867a8220ce43a1b716f5a1aa35fe2ae882",
          "body": "- ultrahdr-core: add tests/ and benches/ to exclude list\n- ultrahdr-rs: add tests/ to exclude list\n- ultrahdr-rs: add version = \"0.1.3\" to libultrahdr_rs git dep (required by cargo package)\n- ultrahdr-core package: 23 files → 17 files (tests/data/*.csv + tests/*.rs + benches/*.rs gone)\n- ultrahdr-rs\n[…]\n\n- cargo package verify is dep-blocked (pre-existing: zenjpeg 0.8.3 on crates.io\n  is incompatible with magetypes 0.9.23; fix is zenjpeg 0.8.4 publish)\n- CHANGELOG [Unreleased] updated for both crates",
          "is_bot": false,
          "headline": "chore(ultrahdr): exclude tests/benches from published packages",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-01T21:53:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6c58a03e69bd81cd910a6bd86b2010acd369b85",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh README for the current ultrahdr API",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-06-01T20:26:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3098aab2385abc3f4781f8dece9e303f156389d0",
          "body": null,
          "is_bot": false,
          "headline": "ci: prebuilt cargo-fuzz + pin gnu fuzz target",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-05-27T23:13:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd8b7856725efe110495f9746e83f537a9332cc1",
          "body": "…#21)\n\n* fix(security): bound metadata magnitudes and validate gainmap inputs\n\nSecurity audit 2026-05-06 (CRITICAL/HIGH findings):\n\n* C1 + H4 + M1: clamp gain LUT to a finite range (`exp(±30 ln2)`) and\n  reject metadata whose magnitude would push f32 math to `±inf` /\n  `NaN`. New `validate_gainmap_m\n[…]\n +inf gain\nprotection (validate_gainmap_magnitude) and metadata bounds (log2<=30,\nlinear<=16, gamma in [0.01,100]) are unchanged. Local\n`cargo test --release -p ultrahdr-core` passes 153+5+3 doctests.",
          "is_bot": false,
          "headline": "fix: bound gain-map metadata magnitudes and validate gainmap inputs (…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-05-07T14:34:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "83f94f87c10633daaf1338225f18b6217a832bea",
          "body": "The previous README accumulated stale claims (e.g. AdaptiveTonemapper\nexample using a public API that no longer exists at that path,\nencoding examples referencing PixelBuffer-from-Vec layouts that\npredate the 0.5.0 zenpixels migration, hand-drawn ASCII pipeline\ndiagrams covering APIs that are now #[\n[…]\nultrahdr and ISO/IEC 21496-1\n  unconditionally\n- Container/streaming sections trimmed: the streaming APIs are\n  #[doc(hidden)] and slated for removal, so they don't deserve top\n  billing in the README",
          "is_bot": false,
          "headline": "docs(readme): rewrite from source for ultrahdr-core 0.5.0",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T22:33:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e939deaa4b7ee16c4ec9cb8349ea3b0c27bc413d",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): pin zentone path-dep to ^0.1.0 (zentone first publish)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T21:33:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f137a017e948173f8097fbfa2cf18eb93a5bfdd",
          "body": "Picks up bug fixes accumulated since 0.6.7. Lockfile already resolved\nto 0.6.12; this just lifts the manifest floor so downstream resolvers\ncan't pick the older buggy versions.",
          "is_bot": false,
          "headline": "chore(deps): bump linear-srgb floor to 0.6.12 (latest)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T14:12:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3955d8bc84656e0791ba79b8d2f91c923bcd07b0",
          "body": "Snapshot the [Unreleased] entries as [0.5.0] - 2026-04-26 and bump.\nPin the zentone path dep to ^0.2.0 (its first published version) so\ncargo publish accepts the manifest. Also reconcile the changelog with\nthe late-cycle re-introduction of the `tonemap` Cargo feature flag\n(default-on); the earlier \"Removed: zentone Cargo feature flag\" entry\ncontradicted the post-#18 state.",
          "is_bot": false,
          "headline": "chore(release): ultrahdr-core 0.5.0",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T14:07:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24ef4e726d9f6d09c998dd11353d89d0237b7c2d",
          "body": "…Encoder\n\n- compute.rs: add `use alloc::vec;` so `vec![0.0f32; ..]` resolves under\n  --no-default-features (was breaking the no_std build)\n- streaming.rs: replace `gainmap_rows: Vec<Vec<u8>>` + per-row clone with\n  a single preallocated `gainmap_data: Vec<u8>`. compute_gainmap_row_into_buffer\n  writ\n[…]\n\n  Eliminates 1 alloc per gainmap row in the streaming path (~50% reduction\n  vs. the prior alloc+clone pair). For a 4K image at scale=4 multi-channel\n  this saves ~3 MB of allocator churn per encode.",
          "is_bot": false,
          "headline": "fix(ultrahdr-core): no_std build + drop redundant Vec<Vec<u8>> in Row…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T13:50:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0c5b9f5caa1d15544f9f31aaaedb4b745d779df",
          "body": "…ates zentone re-exports)\n\nGates the zentone-backed re-exports at the crate root and the entire\ncolor::tonemap / color::streaming_tonemap modules behind the new\ntonemap feature (default-on). Decoder-only consumers can now build with\n`--no-default-features --features std` to drop the transitive zento\n[…]\nres std build/test/clippy\n  steps so no workflow changes needed.\n\n`cargo publish --dry-run --allow-dirty` fails on the unpublished\nzentone path-dep; that's expected, unchanged from before this commit.",
          "is_bot": false,
          "headline": "feat(ultrahdr-core): re-introduce tonemap feature flag (default-on, g…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T13:34:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "307c6c9deee1dc491b0808c69ae18d63a4330366",
          "body": "…ing block\n\nAdds a public `compute_gain_row` function to ultrahdr-core that quantizes\ngain-map bytes for one row given paired HDR + SDR linear-RGB rows. The\nexisting `compute_gainmap_slice` luminance path now delegates to it\nper row — bit-identical output, verified by reference_parity tests\n(libultrahdr_apply / libavif_apply / libavif_weight max_err unchanged).\n\nDesigned for zenjpeg's encode flow, which fuses zentone's splitter with\ngain-quantize in a single pass.",
          "is_bot": false,
          "headline": "refactor(gainmap): extract compute_gain_row as public row-level build…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T13:06:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "552c855bd6c349c541a67bb4530697f6be9c6836",
          "body": "zentone graduated `LumaGainMapSplitter` (+ `SplitConfig`, `SplitStats`,\n`LumaToneMap`, `LumaFn`, `HableFilmic`, `Bt2408Yrgb`, `ExtendedReinhardLuma`)\nout of `experimental` in zentone 67548f7. ultrahdr-core had a parallel\ncopy plus an HDR-only encode helper (`compute_gainmap_tonemap`) that wrapped\nit\n[…]\np ultrahdr-core`: clean\n- `RUSTDOCFLAGS=\"-D warnings\" cargo doc -p ultrahdr-core --no-deps`: clean\n- `cargo build -p ultrahdr-core --no-default-features`: builds (zentone in default-feature-free path)",
          "is_bot": false,
          "headline": "feat(gainmap)!: consolidate splitter on zentone, drop in-core copy",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T12:41:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2735ce5e3755e0e35b34d6037c48997e560a76f3",
          "body": "Routine dep refresh — all 149 lib + 5 reference parity tests still\ngreen.",
          "is_bot": false,
          "headline": "chore: cargo update (cc, garb, libc, etc.)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T06:14:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b80d195367275f23285ff7213c5a4b6b075e123c",
          "body": "zenpixels 0.2.11 (RgbaF16 / RgbF16) and zenpixels-convert 0.2.11 are\nboth on crates.io now. Drop the workspace [patch.crates-io] block and\nthe path-pin on zenpixels in workspace.dependencies — back to a plain\nversioned dep. Also removes the 'Clone sibling zenpixels' step from\nci.yml / fuzz.yml / ffi-tests.yml / gainmap-interop.yml since the patch\nno longer needs the local checkout.\n\nBuild + 149 lib + 5 reference parity tests still green.",
          "is_bot": false,
          "headline": "chore: drop zenpixels [patch.crates-io] now that 0.2.11 is published",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T06:11:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "632ed1bf3cb24b195c6f8e99e9c50e7030baa7cf",
          "body": "ultrahdr-core's workspace Cargo.toml path-pins zenpixels +\nzenpixels-convert via [patch.crates-io] for the 0.2.11 RgbaF16 work.\nCI workflows now clone the sibling zenpixels repo alongside zentone.",
          "is_bot": false,
          "headline": "ci: clone sibling zenpixels for in-flight 0.2.11 [patch.crates-io]",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T02:02:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "867f3976ec862aaa1124d9b0afefd4100e956bd4",
          "body": "The Fuzz CI job has been failing on every main push since fuzz/Cargo.toml\nacquired its zencodec dep — fuzz.yml only clones zentone + zenjpeg, never\nzencodec, so the path = '../../zencodec' resolves to ENOENT on CI.\n\nSwitch to the published version (matches workspace Cargo.toml's\nzencodec = '0.1.13'). Local builds still work; CI now does too.",
          "is_bot": false,
          "headline": "fix(fuzz): use published zencodec instead of broken sibling path",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T01:24:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40c1174b2ef7e30dcdbd4238cc85c4cc453b071e",
          "body": null,
          "is_bot": false,
          "headline": "docs(ultrahdr-core): README format table reflects LinearF16 + f16 inputs",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T01:22:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f901ae5f53d7f995815753d6a37d7bc02873270",
          "body": "Adds the f16 leg of the libultrahdr decode-format parity matrix. f16 is\nthe compact HDR output format compositors and GPU samplers want:\n8 bytes/pixel vs LinearFloat's 16, same dynamic range, no perceptible\nloss for normal HDR ranges.\n\nCoverage:\n\n- `HdrOutputFormat::LinearF16` writes RgbaF16 PixelBu\n[…]\nropped.\n\nSkipped this round: HdrOutputFormat::Pq1010102 / Hlg1010102. Those need\na packed `PixelFormat::Rgba1010102{Pq,Hlg}` in zenpixels first (or a\nseparate raw-bytes-output API). Tracked under #10.",
          "is_bot": false,
          "headline": "feat(ultrahdr-core): HdrOutputFormat::LinearF16 + f16 input acceptance",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T01:22:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "205d9d3768801f04caaa05a32a11c96aec602e74",
          "body": "…s (closes #5)\n\nAdds tests/reference_parity.rs with 5 tests that read the C++ extraction\ngoldens from zentone/reference-checks/golden/ (copied into tests/data/\nso the crate is self-contained at publish time):\n\n- libultrahdr_apply_gain_parity: 105 rows, bit-exact (max_err = 0.0)\n- libavif_apply_gain_\n[…]\n log2. Our GainMapMetadata uses log2.\n\nAlso makes calculate_weight pub (was pub(crate)) — mirrors\navifGetGainMapWeight; callers can now precompute the apply weight\nwithout going through apply_gainmap.",
          "is_bot": false,
          "headline": "test(ultrahdr-core): reference parity vs libultrahdr + libavif golden…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T00:12:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4252929b22cf96f6ef09c057ff80abbcb670382",
          "body": "* feat(ultrahdr-core): Shepard's IDW upsample for gain map apply\n\nlibultrahdr's CPU reference uses Shepard's Inverse Distance Weighting for\ngain-map upsample (`sampleMap` in gainmapmath.cpp). Its GPU path uses\nbilinear via the hardware texture sampler; the ISO 21496-1 spec doesn't\nmandate either. Ou\n[…]\neg::container` in lib.rs,\n`super::apply` in splitter.rs) fixed in passing — they were blocking\nthe Documentation CI job on the prior version of this branch.\n\n* chore: cargo fmt --all (workspace drift)",
          "is_bot": false,
          "headline": "feat(ultrahdr-core): Shepard's IDW upsample for gain map apply (#18)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-26T00:05:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4184c0a5428c1f4034ccb3d8b93ecc5b01d8f1c3",
          "body": "…of 0.5.0\n\nHides API surface that no documented ultrahdr-rs decode/encode path\nreaches, pre-staging deletion in the next minor release. Non-breaking\ntoday — symbols are still accessible if found, just not listed in\nrustdoc. Each hidden item notes in its docstring that it's scheduled\nfor removal and \n[…]\nte_gainmap with the SDR\n  they produce.\n\nCHANGELOG.md documents every hidden symbol under QUEUED BREAKING CHANGES\nso the 0.5.0 deletion PR is mechanical.\n\ncargo test --workspace: all 300+ tests green.",
          "is_bot": false,
          "headline": "chore(ultrahdr-core): #[doc(hidden)] deprecated public surface ahead …",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T23:42:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ff77541aed9bb2be41026d558cb2d3f7300d3eb",
          "body": "…3 LOC)\n\nThe BT.709/DisplayP3/BT.2020 matrices, `Matrix3x3` alias, `apply_matrix` /\n`apply_matrix_row` helpers, and `gamut_conversion_matrix` /\n`convert_gamut` that lived here were wholesale duplicated by\n`zenpixels::ColorPrimaries::gamut_matrix_to` — which derives matrices from\nchromaticity coordin\n[…]\n internally\nby `convert_gamut`, which is preserved as a wrapper.\n\nNo new workspace dependencies — uses zenpixels (already depended on).\n\ncargo test --workspace: 143 + 49 + all integration tests green.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): trim gamut.rs, delegate to zenpixels (523→20…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T04:20:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b7df54800a07a56177aeff434fa329ade8caded",
          "body": "…njpeg::container (1122→217 LOC)\n\nThe local MPF parser / APP-segment scanner / MpfDirectory wrapper /\nMpfImageType enum / `assemble` / `generate_mpf` duplicated what the\nsibling crate zenjpeg had already landed in `zenjpeg::container::{mpf,\nmarker, types}` (move that began with zenjpeg container mig\n[…]\n (unchanged call shape).\n\nExample binary `test_ultrahdr_parse.rs` rewritten to the new API.\n\ncargo test --workspace: all green (149 + 35 + integration + parity 4/4\nagainst libultrahdr's ultrahdr_app).",
          "is_bot": false,
          "headline": "refactor(ultrahdr-rs): strip container.rs duplication, delegate to ze…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T04:20:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "714c05a85cc2da52c6ce5a1c4bb2e0df5f0af0ce",
          "body": "Zero consumers inside or outside ultrahdr-core; superseded by\nbetter-owned implementations elsewhere:\n\n- YCbCr ↔ RGB conversions (YuvCoefficients, rgb_to_ycbcr/ycbcr_to_rgb\n  families, YUV 8-bit / 10-bit / f32 flavors) — owned by zenyuv, yuv,\n  and zenjpeg::color. 6 variants × 0 call sites here.\n- R\n[…]\nransfer functions + tone mapping). Everything pixel-format-specific\nbelongs elsewhere.\n\nTests: 149 ultrahdr-core + 49 ultrahdr-rs lib tests pass; workspace\ncargo check clean; fuzz targets still build.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): drop dead color/convert.rs (387 LOC)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T00:49:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "90ca8834399c86167397ca3566aafa796d01e7b6",
          "body": "The `hdr_decode_matches_libultrahdr` test was comparing our HDR output\nat display_boost=1.0 against `ultrahdr_app`'s default output, which\napplies FULL boost. Same f32 formula, radically different weight:\n\n  - libultrahdr: no `--max_display_boost` flag -> FLT_MAX ->\n    min(FLT_MAX, hdr_capacity_max\n[…]\n01432 (was 0.094, 65x  reduction)\n\nAll three well under the 0.1 threshold. No code changes in\n`apply_gainmap`/`calculate_weight` — both were already correct; the\ntest was feeding them the wrong input.",
          "is_bot": false,
          "headline": "test(ultrahdr-rs): fix HDR parity test to pass full display_boost",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T00:39:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5e82815cccba750da11067626555ea130bf16b5b",
          "body": "…PixelBuffer\n\nMirror of the ultrahdr-core cleanup one commit up: every `RawImage` call\nsite across ultrahdr-rs, tests, benches, fuzz targets, README, and example\nbinaries is rewritten to use `zenpixels::PixelBuffer` / `PixelSlice` /\n`PixelSliceMut`.\n\n- ultrahdr-rs/{encode,decode}.rs: Encoder takes/s\n[…]\ns). `cargo test -p ultrahdr-rs --features __pixel-parity\n--test libultrahdr_pixel_parity` passes 4/4 against ultrahdr_app\n(built from libultrahdr main). `cargo clippy --workspace --all-targets`\nclean.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-rs): migrate encoder/decoder/tests/benches/fuzz to …",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T00:29:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a4327e11e2c5b42c049fb0bd10aa29360e83c6a",
          "body": "…ixelBuffer/PixelSlice\n\nEliminate ultrahdr-core's own owning/borrowed pixel container in favor of\nzenpixels::PixelBuffer (owning) and zenpixels::PixelSlice/PixelSliceMut\n(borrowed). All gain-map and tone-mapping kernels now route through\nPixelSlice at the boundary, and public APIs take &PixelBuffer.\n[…]\nte_gainmap_tonemap takes PixelSlice;\n  returns PixelBuffer.\n- color/tonemap.rs: AdaptiveTonemapper::{fit,apply,apply_with_gainmap},\n  tonemap_image_to_srgb8 all on PixelBuffer.\n- 155 unit tests green.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): replace RawImage/Ref/RefMut with zenpixels P…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-23T00:29:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0e68c54951709002952061d4c692e2d9372a6d54",
          "body": "…o zenjpeg::container + zencodec (closes #8)\n\nUltrahdr-core had a parallel JPEG-container implementation sitting\nalongside zenjpeg::container. Zenjpeg owns the canonical version now,\nand the codec-agnostic ISO 21496-1 payload lives in zencodec. Delete\neverything ultrahdr-core duplicated:\n\nRemoved fr\n[…]\nr-parity tests).\nFull workspace `cargo check --workspace` is clean.\n\nBuilds on top of the fold-issue-9-zenpixels stack (PR #11) since both\ntouch ultrahdr-core/src/types.rs; nothing else to coordinate.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): fully strip container + metadata, delegate t…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-22T21:44:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56501aa158a2ef41def579fcd6b137c8d0d553d9",
          "body": "ultrahdr-core: fold types onto zenpixels (closes #9)",
          "is_bot": false,
          "headline": "Merge pull request #11 from imazen/fold-issue-9-zenpixels",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-22T21:42:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12cb640f1e2d04de2c3250aefb911fc483e24486",
          "body": "- Drop zencodec's deprecated Iso21496Format::JpegApp2 variant in favour of\n  the replacement names: JxlJhgm (bare payload — same bytes as the\n  deprecated variant) and JpegApp2BodyWithUrn (URN + payload)\n- Extend the parse_iso21496 fuzz target to cover all three supported\n  wire-format variants (Avi\n[…]\n that no longer exists)\n- Drop the history-only comment in RawImage::new that referenced the\n  pre-fold TransferFunction default\n- Update README wire-format example to use the new Iso21496Format names",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): final cleanup of types.rs (fold #9 stage 5)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T09:11:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a8d35665b50d0002282c7ae5a042e0c2324ef8c",
          "body": "…old #9 stage 4)\n\n- Document RawImage as ultrahdr-core's owned pixel container (bridge type)\n- Add TryFrom<&PixelBuffer> for RawImage to lift zenpixels buffers in\n- Add RawImage::as_pixel_slice() and ::to_pixel_buffer() to flow out to\n  zenpixels-native pipelines (resize, color conversion, codec dis\n[…]\nork. The current bridge is enough for\nconsumers that already own a PixelBuffer to call ultrahdr-core kernels without\nmanually reformatting metadata, which was the motivating pain point behind\nfold #9.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): bridge RawImage to zenpixels::PixelBuffer (f…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T09:08:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11756a8b6043c481e63774d5b1eb538886239bb4",
          "body": "…fold #9 stage 3)\n\n- Delete ultrahdr-core's local PixelFormat enum\n- Re-export zenpixels::PixelFormat (now the canonical type)\n- Rename Rgba32F → RgbaF32 across all callers (matches zenpixels name)\n- bytes_per_pixel() returns usize (not Option<usize>); drop .unwrap() / None arms\n- Replace is_hdr() m\n[…]\nd in stage 1)\n\nAdds '_ => ...' fallback arms in gain map kernels that only support the 4 SDR/HDR\nformats (Rgba8, Rgb8, RgbaF32, Gray8) — other zenpixels variants return zero RGB\nrather than panicking.",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): fold PixelFormat to zenpixels::PixelFormat (…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T09:03:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac7605302c2343a1e33cf617937da5fe414e9a47",
          "body": "…ransfer→zenpixels::TransferFunction",
          "is_bot": false,
          "headline": "refactor(ultrahdr-core): ColorGamut→zenpixels::ColorPrimaries, ColorT…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T08:58:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "581f6a1df66eacdd2745338e1ad95a8ed832b095",
          "body": "Per #9 audit: Rgba16F, P010, Yuv420, Rgba1010102Pq, Rgba1010102Hlg have\nzero production callers anywhere in the workspace — only tests, fuzz\ntargets, and benchmarks constructed them. They were speculative\nplatform-format support for iOS/Android integrations that never landed.\n\nDeletions:\n- `PixelFor\n[…]\nib tests pass. ultrahdr-rs still compiles (uses\nonly SDR + Rgba32F variants). Remaining clippy warnings are pre-existing\n`Iso21496Format::JpegApp2` deprecations unrelated to this change.\n\nRefs #9, #10",
          "is_bot": false,
          "headline": "chore(ultrahdr-core): delete dormant packed + half-float pixel formats",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T08:45:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e917a088f634e0e4e94e8cd36734bfcad33f9a00",
          "body": "Previous commit formatted zenjpeg's path+version+features across three\nlines. That broke ci.yml jobs that run\n`sed -i '/^zenjpeg/d' Cargo.toml` to strip the workspace-level zenjpeg\ndep before building ultrahdr-core standalone — the regex `^zenjpeg`\nonly matched line 1, leaving lines 2-3 as orphaned toml that cargo\nmetadata couldn't parse.\n\nKeep the dep on a single line. Added a comment calling out the sed\nconstraint so a future refactor doesn't re-wrap it.",
          "is_bot": false,
          "headline": "ci: keep zenjpeg dep on one line so ci.yml sed strip still works",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T07:46:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce2b633418879a0c1cec8d3aa9dc686ae7f984e7",
          "body": "Switch ultrahdr's `zenjpeg` dep from crates.io `version = \"0.8\"` (which\ncurrently resolves to 0.8.3) to `path = \"../zenjpeg/zenjpeg\"` with\n`version = \"0.8\"` as an advisory hint. This mirrors the existing\nzentone path-sibling pattern.\n\nFixes three red CI workflows on main:\n- Gain Map Interop\n- Fuzz\n-\n[…]\neg from Cargo.toml via\n  sed before building (tests ultrahdr-core standalone).\n\nVerified locally: `cargo check -p ultrahdr-rs` clean, 49 lib tests + 13\nintegration tests pass against the sibling tree.",
          "is_bot": false,
          "headline": "ci: sibling-path zenjpeg for pre-cascade coordination",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-21T07:43:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec2a6d87cc437eb995e2c8a07c3216b704f9cc2e",
          "body": "Picks up fixes from zenpixels 0.2.10:\n- Planner no longer silently passes bytes through on TF changes (#20)\n- AlphaPolicy::CompositeOnto correctness on premul source (#22)\n- First-class Gamma 2.2 transfer in the fast path (#18)\n\nSee https://github.com/imazen/zenpixels/releases/tag/v0.2.10",
          "is_bot": false,
          "headline": "deps: bump zenpixels + zenpixels-convert min to 0.2.10",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-20T20:35:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "940b7c6b3aa5596693e0c94101ac3efa28c86294",
          "body": "find_jpeg_boundaries did a naive byte-wise scan for FFD9 starting right\nafter each SOI. On Pixel HDR+ output — where APP1 EXIF carries an\nembedded thumbnail JPEG with its own SOI..EOI near byte 27,000 — the\nnaive scan returned the thumbnail's EOI as the primary's boundary,\nmissing the rest of the 2.\n[…]\n test test_find_jpeg_boundaries_skips_embedded_thumbnail\nbuilds a synthetic Pixel-shape fixture (APP1 with inner thumbnail +\nDQT + SOS + entropy + outer EOI) and asserts only one boundary is\nreturned.",
          "is_bot": false,
          "headline": "fix(ultrahdr-core): find_jpeg_boundaries skips embedded thumbnail EOI",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-18T00:52:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f2d05d2a229b9a789faf940e18be84ba871cebd",
          "body": "MPF's primary_image_size field is unreliable on Pixel HDR+ 1.0.* output.\nOn Ultra_HDR_Samples_Originals_02.jpg (4080x3072), MPF reports\nprimary_size=2,852,770 but the actual JPEG EOI is at offset 2,853,078 —\n308 bytes past MPF's declaration, inside the last MCU row's entropy-\ncoded scan data.\n\nDecod\n[…]\nmeasurement:\n  MAE  0.029 → 0.026 (IDCT rounding only)\n  max  71 → 3\n\nMPF is still used to locate secondary images (the gain map) since\nthose are embedded mid-file and not markerable from the outside.",
          "is_bot": false,
          "headline": "fix(ultrahdr-rs): locate primary JPEG by marker scan, not MPF size",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-18T00:47:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8f31e2c54874c8846ee8420d609683bcf4b29cb",
          "body": "v0.8.3 (which has 3ba1f1ab + 6755b21a chroma fixes) still shows\nmax_delta=46 identical to v0.7.1 — MAE=0.007991 vs an earlier rounded\n'0.008'. Either:\n\n  a) the fix is in zenjpeg but ultrahdr-rs's decode path doesn't use\n     the fixed upsampler (e.g. streaming vs coefficient path, or 'plain'\n     b\n[…]\nns)\n  - 10 sample pixels with delta >= 30, tagged with y%16 and channel\n\nGate stays at max_delta <= 8; diagnostics print before the panic so\nthey land in the CI failure log. Next-step data, not a fix.",
          "is_bot": false,
          "headline": "test(ultrahdr-rs): add spatial diagnostics to SDR parity test",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T23:48:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "255cc71804048e97248d9870ed5de1a95191e75e",
          "body": "Investigation of the earlier 46-delta SDR finding and 2x HDR size\nmismatch traced both to a stale zenjpeg pin and a wrong format assumption.\n\n**Why max_delta = 46 on zenjpeg 0.7.1:**\n\nzenjpeg v0.7.1 is missing the chroma-boundary fix 3ba1f1ab 'fused\nparallel h2v2 fancy chroma boundary fixup' (landed\n[…]\node_matches_libultrahdr: MAE < 0.1 (≈0.6% of linear HDR\n  dynamic range; f16 quantization is inherent)\n\nIf CI shows these thresholds are wrong post-bump, we have real data\nto adjust with, not guesses.",
          "is_bot": false,
          "headline": "fix(ultrahdr-rs): bump zenjpeg 0.7 → 0.8, restore pixel-parity tests",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T23:01:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3810abd561f3a9d4370b0b28a2a35bf9182b9e5f",
          "body": "…ines\n\nInitial CI run surfaced real unresolved divergences:\n\n- SDR: MAE=0.008 across 50M+ bytes (essentially perfect) but isolated\n  edge/chroma-boundary pixels differ by up to 46 from libultrahdr. zenjpeg\n  IDCT + upsampling is not bit-identical to libjpeg-turbo.\n- HDR: ultrahdr_app -O 4 produced e\n[…]\n 'no graceful skips',\nthe right move is to drop the two tests whose thresholds were guessed,\nnot relax them. Probe + MPF tests (with ground-truth expectations)\nstay — they pass on real Pixel fixtures.",
          "is_bot": false,
          "headline": "test(ultrahdr-rs): remove sdr/hdr pixel-diff tests pending real basel…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T20:57:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "08eb0dd8dcee0a2ada51b841a8b28308693cf7fb",
          "body": "…ture\n\nCovers gap-audit items #13-#16 by shelling out to Google's ultrahdr_app\nbinary and comparing field-by-field / pixel-by-pixel.\n\n- probe_metadata_matches_libultrahdr (#14): all 7 fields within 1e-3/1e-4 tolerance\n- mpf_offsets_match_libultrahdr (#13): libultrahdr probes our re-encoded output\n- \n[…]\nt elsewhere.\nIf the feature is on and the binary is missing, the test panics loudly.\n\nDependencies: which 8.0.2 (binary discovery), tempfile 3.27.0 (scratch dir).\nbytemuck was already a workspace dep.",
          "is_bot": false,
          "headline": "test(ultrahdr-rs): pixel-parity suite gated behind __pixel-parity fea…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T17:43:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a20679fb2eb7a937ec048f89c2ed99ba208694d",
          "body": "Covers 5 of the 19 correctness-gap audit items with real\nlibultrahdr-/Pixel-/awesome-gain-maps-produced files fetched lazily\nfrom imazen/codec-corpus (cached under ~/.cache). Tests silently\nskip if the corpus can't be reached, so offline CI stays green.\n\nAudit mapping:\n\n- #3  Pixel samples: decode_p\n[…]\nt is_ultrahdr=false, truncated fails\n    at gain-map decode (not silent garbage), bitflip doesn't panic.\n\nTests exit: 9 passed, 0 failed. Corpus download time (first run):\n~18s for ~32 MB of fixtures.",
          "is_bot": false,
          "headline": "test(ultrahdr-rs): real-fixture parity tests via codec-corpus",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T17:35:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "994550350061852290f34513defcb36ca1d7d5a7",
          "body": "…in ultrahdr-core, drop _test-helpers + transfer features\n\nCloses the biggest newbie-experience gaps from the walkthrough.\n\nultrahdr-rs:\n- zenjpeg is no longer optional. The _test-helpers feature is deleted\n  entirely. Decoder::decode_sdr / decode_gainmap / decode_hdr /\n  decode_hdr_with_format / di\n[…]\nged from 'Optional\n  (zenjpeg)' to 'Yes (zenjpeg)' — matches reality.\n\nTests: full workspace green (201 ultrahdr-core lib + 193 ultrahdr-rs\nintegration + 8 parity + rest). Clippy clean workspace-wide.",
          "is_bot": false,
          "headline": "restructure: zenjpeg mandatory in ultrahdr-rs, linear-srgb mandatory …",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T15:21:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "277d087cdc6996fb250eabe83ddd18d814313d33",
          "body": "Close out several small pre-publish items from the readiness audit:\n\n- color/tonemap.rs: AdaptiveTonemapper::fit (PerChannel path) was setting\n  FitStats::mae to 0.0 with a TODO. Compute it the same way the\n  Luminance path already does — mean of |lut(hdr) - sdr_actual| across\n  all fitted (hdr, sdr\n[…]\ne development as of April 2026'\n  notice before the acknowledgments block, warning users to pin minor\n  versions through the next few releases.\n\nNo public-API breaks; 201 lib tests + 4 doc tests pass.",
          "is_bot": false,
          "headline": "polish(ultrahdr-core): pre-publish fixes",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-17T05:50:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe0bc1f49011462baba28dcadd96e2323fb573dd",
          "body": "…jpeg 0.7.1 which requires rustc 1.93\n\nThe ffi-tests feature now pulls in _test-helpers (so the parity test\ncan reach our Decoder::dimensions / Encoder::set_hdr_image helpers).\n_test-helpers pulls in zenjpeg, whose 0.7.1 MSRV is 1.93.\n\nBumping this workflow to @stable is safe because it's a functional\ntest suite, not an MSRV gate — the ci.yml 'MSRV (1.92)' job still\nexercises ultrahdr-core on the pinned 1.92 toolchain, which is the\nsurface we actually commit to MSRV for.",
          "is_bot": false,
          "headline": "ci(ffi-tests): bump toolchain to stable — ffi-tests feature needs zen…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T23:05:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acc698c61b3813861e258dc96ab22906e61507ea",
          "body": "The FFI parity tests (tests/parity_libultrahdr.rs) reference methods on\nour own Decoder/Encoder (dimensions, set_hdr_image, etc.) that are\ngated behind the _test-helpers feature. Under 'cargo test --features\nffi-tests', _test-helpers is off by default, so the tests failed to\ncompile with E0599 'no m\n[…]\nnance.\n\nAlso: the gainmap_metadata_access test printed meta.channels, which\ndoesn't exist on the fork wrapper's GainMapMetadata (flat arrays, not\nper-channel structs). Print the actual fields instead.",
          "is_bot": false,
          "headline": "fix(ffi-tests): rename dep to libultrahdr_rs, imply _test-helpers",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T23:02:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5503a83055441e73b9b893024a3c1880c99479a3",
          "body": "…ct fix\n\nUpstream Enter-tainer/libultrahdr-rs's ultrahdr-sys 0.1.3 triggers a\nCMake ExternalProject_Add that re-runs 'git rev-parse HEAD' on every\nrebuild. CI runs that strip nested .git dirs (Swatinem cache layers do\nthis) break on subsequent builds with 'Failed to get the hash for HEAD:\nfatal: not\n[…]\nes libultrahdr's\nCMakeLists.txt to set UPDATE_DISCONNECTED TRUE + GIT_SHALLOW TRUE on the\nturbojpeg ExternalProject_Add, skipping the update step after the\ninitial clone.\n\nPR back to upstream pending.",
          "is_bot": false,
          "headline": "fix(ffi-tests): pin libultrahdr dep to imazen fork with ExternalProje…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T22:36:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "60f8227e9f18b9d9e02d197b2eff5e5f262d77d7",
          "body": "- fuzz_targets/apply_gainmap.rs: migrate from the removed\n  GainMapMetadata::new() + flat array fields to GainMapChannel +\n  GainMapParams::default(). Same per-channel log2-domain migration as\n  wasm-bench and the gainmap bench got earlier.\n\n- .github/workflows/gainmap-interop.yml: the 'Validate met\n[…]\nvery extract() call returned None. Pass the probe through the\n  PROBE_OUTPUT env var instead so Python reads it via os.environ. This\n  bug has been silently failing every interop run since Apr 1 2026.",
          "is_bot": false,
          "headline": "fix: fuzz apply_gainmap target + gainmap-interop probe parsing",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T22:15:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb7b7d2ebd7635b3519c6664f4bb965f3f191ff5",
          "body": "- streaming.rs sample_row_rgb loop: use iter_mut().enumerate() instead of\n  range indexing (clippy::needless_range_loop).\n- compute.rs test helpers: same pattern — iterate px slice with\n  enumerate() instead of 'for c in 0..3'.\n- compute.rs test configs: build GainMapConfig via struct-update syntax\n\n[…]\nppy::field_reassign_with_default).\n- types.rs test helper make_metadata has 9 params by design (every gain\n  map field split out for tests); allow too_many_arguments on the test\n  helper specifically.",
          "is_bot": false,
          "headline": "fix(clippy): resolve --all-targets clippy errors",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T22:09:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dce25a52161504e9c212b55f97daf85b838ea6fd",
          "body": "Same per-channel + log2 domain migration as wasm-bench/tests got earlier.\nBench is built by 'cargo build -p ultrahdr-core --all-targets' on CI but\nnot reached by 'cargo test --lib', so it slipped through the earlier\ntest-migration commit.",
          "is_bot": false,
          "headline": "fix(bench): migrate gainmap bench to GainMapParams API",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T21:52:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee37ada0c7131b93837ef8d91402b764539be8a1",
          "body": "- gainmap/apply.rs: add 'use alloc::vec' so vec! resolves when std is off\n  (broke cargo build --target wasm32-unknown-unknown --no-default-features\n  on CI; pre-existing, surfaced because slim-0.5 introduced vec! usage).\n- color/mod.rs: de-link zentone::experimental::streaming (not reachable\n  by rustdoc from ultrahdr-core).\n- gainmap/splitter.rs: pack_log2_gain_u8 is pub(super); de-link from the\n  module docstring.\n- types.rs: fully-qualify GainMapParams::validate in the doc link.",
          "is_bot": false,
          "headline": "fix: WASM no-default-features vec! macro + doc link errors",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T21:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c2cd33dc6a6898a53a462ca1f8de5a20e96f6f4",
          "body": null,
          "is_bot": false,
          "headline": "style: cargo fmt — slim-0.5 landed without running fmt",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T21:42:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b70aac97e35ec1d2e5da24c0b0f040747f6235b",
          "body": "ultrahdr-core depends on zentone via path = \"../../zentone\" (zentone is\nnot published to crates.io yet). Every CI job that builds ultrahdr-core\nneeds a zentone checkout next to the ultrahdr checkout.\n\n- ci.yml: add 'git clone imazen/zentone ../zentone' after the\n  'Strip workspace members' step in a\n[…]\negression).\n- gainmap-interop.yml: add zentone to the existing 'Clone sibling\n  repos' block alongside zune-image and zenjpeg.\n\nZentone is public at https://github.com/imazen/zentone; no token\nneeded.",
          "is_bot": false,
          "headline": "ci: clone sibling zentone in workflows + drop stale zencodec feature",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T21:37:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "341d64291841ce42e5efc1d37f35ec047da3ea9f",
          "body": "Decouple ultrahdr-core from zentone so decoder crates (zenjpeg, zenavif,\nzenjxl) can pull in gain map math without the full tone-mapping stack.\n\n- Add an in-core luma splitter in gainmap/splitter.rs:\n  LumaToneMap trait + LumaFn closure adapter, SplitConfig, SplitStats,\n  LumaGainMapSplitter<T>. Por\n[…]\nvia feature = \"zentone\".\n\nTests: 200/200 default (195 prior + 5 new splitter tests); 140/140 with\nzentone off (smaller suite because tonemap.rs tests are gated).\n\nChangelog updated under [Unreleased].",
          "is_bot": false,
          "headline": "feat(ultrahdr-core): zentone optional default-on + in-core luma splitter",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T20:36:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0328cf44f055c92aa5c2b1d6b54220868b2ab98",
          "body": "Large workspace refactor landing the feat/slim-0.5 branch.\n\nultrahdr-core now depends on:\n- zencodec (mandatory): canonical GainMapParams/GainMapChannel/Fraction\n  types replace ~1700 lines of duplicated ISO 21496-1 parsing/metadata.\n  Gain map fields are now log2 domain per ISO 21496-1.\n- zenpixels\n[…]\ninear-domain values updated to log2 domain.\n- wasm-bench updated to construct metadata via GainMapChannel.\n\nWorkspace:\n- Adds zenresize to workspace deps.\n- fuzz targets rewired through the new types.",
          "is_bot": false,
          "headline": "refactor: slim ultrahdr-core by adopting zencodec+zentone+zenpixels",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T20:26:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e36cfc6c178a2b148047ecc47a924edd252f3cfc",
          "body": "- Created CHANGELOG.md with per-crate sections (ultrahdr-core, ultrahdr-rs)\n- Added Acknowledgments section to README crediting Google Ultra HDR spec + libultrahdr\n- Removed unused path/version overrides from workspace deps in both Cargo.tomls\n- Added .workongoing to .gitignore",
          "is_bot": false,
          "headline": "docs: add CHANGELOG, credits, clean unused Cargo.toml keys",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-16T00:46:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b448736bbbe5f4e6622892e75f555afbbd83f8a5",
          "body": "…ng changes)\n\nVersion 0.4.0 was an unnecessarily large bump. cargo semver-checks confirms\nno breaking changes vs 0.3.4.",
          "is_bot": false,
          "headline": "release: ultrahdr-rs 0.3.5 (yank 0.4.0, semver-checks found no breaki…",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-10T18:00:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9f130567910404e5257937ba884c3e4110b00c2",
          "body": null,
          "is_bot": false,
          "headline": "fix: pin moxcms version for crates.io (wildcard not allowed)",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-10T14:15:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "269061c2fda55ce219b27c5e6df89628c35e4e76",
          "body": "Bump ultrahdr-core for overflow guard, SIMD consistency tests,\nWASM proptest gating, and magetypes SIMD migration since 0.4.0.",
          "is_bot": false,
          "headline": "release: ultrahdr-core 0.4.1, ultrahdr-rs 0.4.0",
          "author_name": "Lilith River",
          "author_login": "lilith",
          "committed_at": "2026-04-10T14:15:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 9,
      "commits_last_year": 294,
      "latest_release_at": "2026-07-24T19:30:08Z",
      "latest_release_tag": "ultrahdr-rs-v0.4.1",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 23,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 14.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "wasm-bench",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "crates",
          "matches_repo": null,
          "registry_url": "https://crates.io/crates/wasm-bench",
          "is_deprecated": false,
          "latest_version": "0.2.0",
          "repository_url": null,
          "versions_count": 2,
          "total_downloads": 1285,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 3,
          "first_published_at": "2025-03-20T20:30:14.924493Z",
          "latest_published_at": "2025-03-26T14:27:57.018341Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 486
        },
        {
          "name": "ultrahdr-rs",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "gainmap",
            "hdr",
            "image",
            "jpeg",
            "ultrahdr",
            "encoding",
            "multimedia::images"
          ],
          "ecosystem": "crates",
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/ultrahdr-rs",
          "is_deprecated": false,
          "latest_version": "0.3.5",
          "repository_url": "https://github.com/imazen/ultrahdr",
          "versions_count": 8,
          "total_downloads": 2983,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 493,
          "first_published_at": "2026-01-24T02:51:06.044703Z",
          "latest_published_at": "2026-04-10T18:05:19.619810Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 105
        },
        {
          "name": "ultrahdr-core",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "gainmap",
            "hdr",
            "image",
            "no_std",
            "ultrahdr",
            "no-std",
            "encoding",
            "multimedia::images"
          ],
          "ecosystem": "crates",
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/ultrahdr-core",
          "is_deprecated": false,
          "latest_version": "0.6.0",
          "repository_url": "https://github.com/imazen/ultrahdr",
          "versions_count": 12,
          "total_downloads": 19036,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 5068,
          "first_published_at": "2026-01-23T17:19:49.902952Z",
          "latest_published_at": "2026-07-24T19:30:20.374659Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 16,
      "watchers": 1,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 3
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "justfile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "apidoc/Cargo.toml",
        "fuzz/Cargo.toml",
        "ultrahdr-core/Cargo.toml",
        "ultrahdr-rs/Cargo.toml",
        "wasm-bench/Cargo.toml"
      ],
      "largest_source_bytes": 84160,
      "source_files_sampled": 55,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7806
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml",
        "apidoc/Cargo.toml",
        "fuzz/Cargo.toml",
        "ultrahdr-core/Cargo.toml",
        "ultrahdr-rs/Cargo.toml",
        "wasm-bench/Cargo.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "paste",
            "direct": false,
            "version": "1.0.15",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2024-0436"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 656
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 83,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 22,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "zenutils-apidoc",
          "manifest": "apidoc/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.0"
        },
        {
          "name": "enough",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "half",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.7"
        },
        {
          "name": "archmage",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9.16"
        },
        {
          "name": "magetypes",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9.16"
        },
        {
          "name": "bytemuck",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.14"
        },
        {
          "name": "thiserror",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.0"
        },
        {
          "name": "whereat",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.5"
        },
        {
          "name": "linear-srgb",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6.12"
        },
        {
          "name": "zenpixels",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "zencodec",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "zentone",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.0"
        },
        {
          "name": "zenresize",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "zenpixels-convert",
          "manifest": "ultrahdr-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.2.15"
        },
        {
          "name": "ultrahdr-core",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "moxcms",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "imgref",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "rgb",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "bytemuck",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "thiserror",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "whereat",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.5"
        },
        {
          "name": "enough",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "zenjpeg",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "zencodec",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "zenpixels",
          "manifest": "ultrahdr-rs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "ultrahdr-core",
          "manifest": "wasm-bench/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "archmage",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "archmage",
            "direct": true,
            "version": "0.9.26",
            "ecosystem": "crates"
          },
          {
            "name": "bytemuck",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "bytemuck",
            "direct": true,
            "version": "1.25.0",
            "ecosystem": "crates"
          },
          {
            "name": "enough",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "enough",
            "direct": true,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "half",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "half",
            "direct": true,
            "version": "2.7.1",
            "ecosystem": "crates"
          },
          {
            "name": "imgref",
            "direct": true,
            "version": "1.12.2",
            "ecosystem": "crates"
          },
          {
            "name": "linear-srgb",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "linear-srgb",
            "direct": true,
            "version": "0.6.12",
            "ecosystem": "crates"
          },
          {
            "name": "magetypes",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "magetypes",
            "direct": true,
            "version": "0.9.26",
            "ecosystem": "crates"
          },
          {
            "name": "moxcms",
            "direct": true,
            "version": "0.8.1",
            "ecosystem": "crates"
          },
          {
            "name": "rgb",
            "direct": true,
            "version": "0.8.53",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "thiserror",
            "direct": true,
            "version": "2.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "ultrahdr-core",
            "direct": true,
            "version": "0.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "whereat",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "whereat",
            "direct": true,
            "version": "0.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "zencodec",
            "direct": true,
            "version": "0.1.22",
            "ecosystem": "crates"
          },
          {
            "name": "zenpixels",
            "direct": true,
            "version": "0.2.13",
            "ecosystem": "crates"
          },
          {
            "name": "zenpixels-convert",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "zenpixels-convert",
            "direct": true,
            "version": "0.2.13",
            "ecosystem": "crates"
          },
          {
            "name": "zentone",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "zenutils-apidoc",
            "direct": true,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "aligned-vec",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "almost-enough",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "arbitrary",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "archmage-macros",
            "direct": false,
            "version": "0.9.26",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "bytemuck_derive",
            "direct": false,
            "version": "1.10.2",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.64",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "codec-corpus",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "console",
            "direct": false,
            "version": "0.15.11",
            "ecosystem": "crates"
          },
          {
            "name": "console_error_panic_hook",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "criterion",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "crunchy",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "encode_unicode",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "equator",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "equator-macro",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "garb",
            "direct": false,
            "version": "0.2.8",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "crates"
          },
          {
            "name": "hashbag",
            "direct": false,
            "version": "0.1.13",
            "ecosystem": "crates"
          },
          {
            "name": "itoa",
            "direct": false,
            "version": "1.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "jobserver",
            "direct": false,
            "version": "0.1.34",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.186",
            "ecosystem": "crates"
          },
          {
            "name": "libfuzzer-sys",
            "direct": false,
            "version": "0.4.13",
            "ecosystem": "crates"
          },
          {
            "name": "libm",
            "direct": false,
            "version": "0.2.16",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "num-traits",
            "direct": false,
            "version": "0.2.19",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.4",
            "ecosystem": "crates"
          },
          {
            "name": "paste",
            "direct": false,
            "version": "1.0.15",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.106",
            "ecosystem": "crates"
          },
          {
            "name": "proptest",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "public-api",
            "direct": false,
            "version": "0.52.1",
            "ecosystem": "crates"
          },
          {
            "name": "pxfm",
            "direct": false,
            "version": "0.1.29",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.45",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "rustdoc-types",
            "direct": false,
            "version": "0.57.3",
            "ecosystem": "crates"
          },
          {
            "name": "rustup-toolchain",
            "direct": false,
            "version": "0.1.10",
            "ecosystem": "crates"
          },
          {
            "name": "rustversion",
            "direct": false,
            "version": "1.0.22",
            "ecosystem": "crates"
          },
          {
            "name": "safe_arch",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "safe_unaligned_simd",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_core",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": false,
            "version": "1.0.150",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "similar",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "similar-asserts",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "snapshot-testing",
            "direct": false,
            "version": "0.1.8",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.117",
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "thiserror-impl",
            "direct": false,
            "version": "2.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "tinyvec",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "tinyvec_macros",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.24",
            "ecosystem": "crates"
          },
          {
            "name": "wasip2",
            "direct": false,
            "version": "1.0.4+wasi-0.2.12",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-test",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "which",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "wide",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "winarm-cpufeatures",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.59.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "wit-bindgen",
            "direct": false,
            "version": "0.57.1",
            "ecosystem": "crates"
          },
          {
            "name": "zenanalyze",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.52",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.52",
            "ecosystem": "crates"
          },
          {
            "name": "zmij",
            "direct": false,
            "version": "1.0.21",
            "ecosystem": "crates"
          },
          {
            "name": "zune-core",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "zune-image",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "zune-jpeg",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 105,
        "direct_count": 26,
        "indirect_count": 79
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 12,
        "open_issues": 3,
        "closed_ratio": 0.769,
        "closed_issues": 10,
        "closed_unmerged_prs": 7
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "lilith",
          "commits": 294,
          "avatar_url": "https://avatars.githubusercontent.com/u/107935?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "fuzz.yml",
        "gainmap-interop.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "73ab3d27dff71d8828b29b800c85869738dfeb91",
        "ran_at": "2026-07-25T16:38:10Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T04:09:29Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-06-16T06:52:03Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": [
        {
          "number": 10,
          "created_at": "2026-04-21T08:41:43Z",
          "last_comment_at": "2026-07-23T11:57:52Z",
          "last_comment_author": "lilith"
        },
        {
          "number": 30,
          "created_at": "2026-06-14T06:04:21Z",
          "last_comment_at": "2026-07-23T11:57:51Z",
          "last_comment_author": "lilith"
        },
        {
          "number": 32,
          "created_at": "2026-07-23T12:08:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/imazen/ultrahdr",
    "host": "github.com",
    "name": "ultrahdr",
    "owner": "imazen"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 64,
      "inputs": {
        "security": 57,
        "vitality": 88,
        "community": 41,
        "governance": 56,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 88,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "commits_last_year": 294,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 23
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "23/52 weeks with commits",
                "points": 15.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 23
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "294 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 294
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 9,
              "latest_release_tag": "ultrahdr-rs-v0.4.1",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 14.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "9 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~14.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 14.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 41,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "forks": 0,
              "stars": 16,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "16 stars",
                "points": 19.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "packages": [
                "wasm-bench",
                "ultrahdr-rs",
                "ultrahdr-core"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 23304,
              "monthly_downloads": 5564
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "5,564 downloads/month across crates",
                "points": 49.9,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 5564,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 56,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "merged_prs": 12,
              "open_issues": 3,
              "closed_issues": 10,
              "issue_closed_ratio": 0.769,
              "closed_unmerged_prs": 7
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "77% of issues closed",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 77
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "12/19 decided PRs merged",
                "points": 24.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 12,
                      "decided": 19
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 67,
            "inputs": {
              "followers": 47,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "imazen",
              "public_repos": 220,
              "account_age_days": 5177
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "47 followers of imazen",
                "points": 12.1,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 47,
                      "login": "imazen"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "220 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 220
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "wasm-bench",
                "ultrahdr-rs",
                "ultrahdr-core"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "3 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 3,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "12 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 57,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 83 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 83
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 22
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 83,
              "unassessed_packages": 22,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 83,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 70,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7806
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "justfile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml",
                "apidoc/Cargo.toml",
                "fuzz/Cargo.toml",
                "ultrahdr-core/Cargo.toml",
                "ultrahdr-rs/Cargo.toml",
                "wasm-bench/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "justfile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "justfile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 84160,
              "source_files_sampled": 55,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/55 source files over 60KB",
                "points": 52,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 55,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch crates package 'ultrahdr-apidoc' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T16:38:16.208708Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/imazen/ultrahdr.svg",
  "full_name": "imazen/ultrahdr",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计crates.io.