公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 01:09 UTC

justinlindh / bramble-go

Go SDK for the Bramble LoRa mesh: transports, RPC client, and event streaming for driving Bramble nodes

GoMIT★ 0 星标⑂ 0 复刻始于 2026年7月在 GitHub 上查看 ↗
#golang#lora#mesh-network#sdk

justinlindh/bramble-go 的健康指数为 100 分中的 57 分，处于「中等」区间。 其得分最高的类别是Engineering Quality（86/100），最低的是Community & Adoption（27/100）。 最近一次更新在 3 天前。 近期的大部分工作由 1 位贡献者完成。

57
总分 / 100
中等

软件健康指数

指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。

57
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

Justin Lindh个人账户
11 关注者16 个公开仓库始于 2011年5月

该仓库由个人账户拥有。相较于组织支持的项目，单一所有者项目的延续性风险更高。

软件包生态系统

注册表软件包版本月下载量版本数最近发布
Gogithub.com/justinlindh/bramble-gov0.12.2-224 天前

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？

71良好 · 占总体的 22%

开发活跃度

62中等
评分方式
36/36推送新近度 — 最近一次推送于 3 天前
7.6/36提交节奏 — 52 周中有 11 周有提交
18/18提交量 — 最近一年 138 次提交
0/10OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully
所用输入
commits_last_year138
human_commit_share1
days_since_last_push3
active_weeks_last_year11

发布纪律

84良好
评分方式
27/27有发布版本 — 已发布 1 个发布版本
36/36发布时效 — 最近一次发布版本于 4 天前
12.6/27发布节奏 — 节奏未知（仅一次发布）
0/10OpenSSF Scorecard：Signed-Releases — 无数据
所用输入
releases_count1
latest_release_tagv0.12.2
releases_from_tags否
days_since_latest_release4
mean_days_between_releases—
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？

27危急 · 占总体的 18%

流行度与采用

1危急
评分方式
0/60星标 — 0 个星标
0/25复刻 — 0 个复刻
0/15关注者 — 0 位关注者
所用输入
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

57中等
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证（MIT）
0/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
6.3/6.3PR 模板
所用输入
has_readme是
has_license是
has_contributing否
has_issue_template否
has_code_of_conduct否
has_pull_request_template是

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？

53中等 · 占总体的 24%

维护者韧性（巴士系数）

10危急
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0/22.5提交分布 — 头号贡献者编写了 100% 的提交
1.4/13.5贡献者广度 — 1 位贡献者
0/10OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled1
top_contributor_share1

议题与 PR 响应能力

72良好
评分方式
0/46.8议题解决 — 没有议题或无数据
38.2/38.3PR 接受 — 已裁定的 PR 中 2/2 已合并
0/15OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs2
open_issues0
closed_issues0
issue_closed_ratio—
closed_unmerged_prs0
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。

所有权与托管责任

48存在风险
评分方式
10/30所有权背书 — 个人（用户）账户
0/20已验证域名 — 不适用于个人账户
7.8/25所有者影响力 — justinlindh 有 11 位关注者
21/25既往记录 — 16 个公开仓库，账户约 15 年
所用输入
followers11
owner_typeUser
is_verified—
owner_loginjustinlindh
public_repos16
account_age_days5,541
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。

软件包维护

100优秀
评分方式
25/25已发布且可解析 — go 上有 1 个软件包
35/35发布时效 — 最近一次发布于 4 天前
20/20版本历史 — 22 个已发布版本
20/20未被弃用 — 活跃，未被弃用或撤回
所用输入
packagesgithub.com/justinlindh/bramble-go
ecosystemsgo
any_deprecated否
min_days_since_publish4

工程质量

基础的工程与文档实践是否到位？

86优秀 · 占总体的 20%

工程实践

84良好
评分方式
24/24CI 工作流 — 6 个工作流
24/24存在测试
16/16Linter 配置 — .golangci.yml
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard：CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci是
has_tests是
has_editorconfig否
has_linter_config是
has_precommit_config否

文档

90优秀
评分方式
30/30README
25/25文档目录
15/15文档 / 主页站点 — https://bramblemesh.org
10/10仓库描述
10/10主题标签 — 4 个主题标签
0/10Wiki
所用输入
topicsgolang, lora, mesh-network, sdk
has_wiki否
homepagehttps://bramblemesh.org
has_readme是
has_docs_dir是
has_description是

安全

可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？

39存在风险 · 占总体的 16%

安全态势

39存在风险
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — 无数据
2.5/2.5CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — 无数据
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate3.9
已排除计分（无数据或不适用）：branch_protection, signed_releases。 其余权重已重新归一化。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。

60中等 · 占总体的 0%

AI 代理上下文与指引

40存在风险
评分方式
0/45代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则
0/15机器可读文档（llms.txt）
40/40可读的提交历史 — 100 次人类提交中有 95 次说明了意图（结构化标题或解释性正文）
所用输入
has_llms_txt否
legible_history_share0.95
agent_instruction_files—
agent_instruction_max_bytes—

验证循环（构建 / 测试 / 类型检查）

68中等
评分方式
12.6/18一条命令的引导启动 — go.mod（工具链约定，无任务运行器）
22/22自动化测试
11/11Lint / 格式化配置 — .golangci.yml
11/11静态类型检查 — Go（静态类型）
10/10可复现环境 — lockfile
0/10已体现的代理实践 — 最近 100 次提交中没有代理编写的提交
0/8自动化维护 — 未观察到自动依赖更新
1/10OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
所用输入
has_nix否
has_tests是
lockfilesgo.sum
has_dockerfile否
typed_language是
bootstrap_files—
has_devcontainer否
has_linter_config是
typecheck_configs—
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0

面向模型的代码可读性

100优秀
评分方式
45/45可类型检查的代码 — Go（静态类型）
55/55可控的文件大小 — 采样的 31 个源文件中有 0 个超过 60KB
所用输入
primary_languageGo
largest_source_bytes35,765
source_files_sampled31
oversized_source_files0

机器可读接口

40存在风险
评分方式
0/40API 模式（OpenAPI/GraphQL/proto）
0/20MCP 服务器
40/40可运行示例 — examples
所用输入
example_dirsexamples
has_mcp_signal否
api_schema_files—

关键数据

0GitHub 星标
1贡献者
138最近 12 个月提交数
3距最近推送天数
1发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数

数据采集警告

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

OpenSSF Scorecard 3.9 / 10
3.9综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。Scorecard v5.5.0 · 2026-07-23 01:09 UTC

10Binary-Artifactsno binaries found in the repo
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests2 out of 2 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
1Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
直接依赖 3
注册表软件包版本约束清单文件
Gogithub.com/coder/websocketv1.8.14go.mod
Gogo.bug.st/serialv1.6.4go.mod
Gotinygo.org/x/bluetoothv0.14.0go.mod
全部依赖 未采集

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "golang",
        "lora",
        "mesh-network",
        "sdk"
      ],
      "is_fork": false,
      "size_kb": 368,
      "has_wiki": false,
      "homepage": "https://bramblemesh.org",
      "languages": {
        "Go": 203687,
        "Shell": 2748,
        "JavaScript": 9437
      },
      "pushed_at": "2026-07-19T07:06:57Z",
      "created_at": "2026-07-08T10:27:28Z",
      "owner_type": "User",
      "updated_at": "2026-07-19T07:07:02Z",
      "description": "Go SDK for the Bramble LoRa mesh: transports, RPC client, and event streaming for driving Bramble nodes",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Justin Lindh",
      "type": "User",
      "login": "justinlindh",
      "company": null,
      "location": "Henderson, NV",
      "followers": 11,
      "avatar_url": "https://avatars.githubusercontent.com/u/802578?v=4",
      "created_at": "2011-05-21T20:00:27Z",
      "is_verified": null,
      "public_repos": 16,
      "account_age_days": 5541
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2026-07-18T06:02:20Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "e6b2f00c12ee90a4ebd4102c5d13176cc3c42e19",
          "body": "* ci(ci): enforce PR template section headers on pull requests\n\nAdd a required PR Template workflow that reads the level-2 section\nheaders from .github/PULL_REQUEST_TEMPLATE.md and verifies each one\nappears verbatim, with its formatting, in the pull request body. It\nruns on opened, edited, reopened,\n[…]\nLs, and trailers\nthat routinely exceed that, so drop the gate, matching the bramble repo\nwhich already disables both rules.\n\n---------\n\nCo-authored-by: digits-bot <digits-bot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "ci(ci): enforce PR template section headers on pull requests (#2)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-19T07:06:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7aa8a6919de46de0167890172eb273dd82576c0d",
          "body": "…tover (#1)\n\n* ci: port claude reviews, PR template, squash-aware release, runner cutover\n\nBring bramble-go in line with the mechanisms built on the main bramble\nrepo:\n\n- Add .github/workflows/claude.yml for @claude PR reviews, with a single\n  --allowedTools flag (repeated flags replace each other) \n[…]\n(ci): pass allowed tools to the PR reviewer in one flag\n\nRepeated --allowedTools flags replace each other instead of accumulating,\nso only the last rule survived. Same defect and fix as the main repo.",
          "is_bot": false,
          "headline": "ci: port claude reviews, PR template, squash-aware release, runner cu…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-18T06:01:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d0c3dbd7e5839abc31468fd5d4d4de3b2ae1205e",
          "body": "…coords)",
          "is_bot": false,
          "headline": "chore(go-public): restore + harden internal-refs gate (device addrs, …",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-18T01:04:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68711933ea5813fcf32758fd51254f95f473515f",
          "body": null,
          "is_bot": false,
          "headline": "chore(go-public): restore internal-refs gate after history rewrite",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-17T21:18:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eae017694cf9c0429dc70a57634028da0a9404f9",
          "body": "…gate strict\n\nclient_test.go WiFi/OTA mock IPs 192.168.1.x -> 192.0.2.x (RFC5737 doc\nrange); assertions updated to match. The gate now fails on any private\n192.168.x except the ESP32 SoftAP 192.168.4.x, scans markdown too, and\ndrops the stale .gitea exclusion (which is clean).",
          "is_bot": false,
          "headline": "chore(go-public): genericize test IPs to RFC5737, make internal-refs …",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-17T09:49:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a608ea850b582ae0ed4daf1ed9e7827a33d5031",
          "body": "Rename the Go module path from github.com/justinlindh/bramble-go to\ngithub.com/justinlindh/bramble-go across go.mod, all imports, README, and\ndocs. Scrub internal-infrastructure references for the public mirror.\n\nPort the .gitea workflows to .github/workflows on GitHub-hosted\nubuntu-latest runners (go quality, commitlint, semantic-release via the\nGitHub plugin) and add a check-no-internal-refs gate script plus workflow.\nThe .gitea workflows stay in place as a frozen mirror-side config.",
          "is_bot": false,
          "headline": "chore: rename module to github.com/justinlindh/bramble-go and port CI",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-17T09:30:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b99528f7f79223eb03bb2a06a209431487624b74",
          "body": "Add Broadcast bool and Channel int to Message so callers can classify DM vs broadcast vs channel on the live onMessage path, which carries these fields but no \"to\". Additive and non-breaking.",
          "is_bot": false,
          "headline": "feat(types): expose broadcast and channel routing on Message (#35)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-10T08:07:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2af474aa116d6a706f60a4a4b0259f5d2f86f6d1",
          "body": "…o + parity KAT' (#34) from feat/trust-anchor-client into main",
          "is_bot": false,
          "headline": "Merge pull request 'feat(anchor): trust-anchor client methods + crypt…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-06T21:59:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15737104c8207748292a217e96941a7111345a65",
          "body": "…ity KAT\n\nAdds the operator-side trust-anchor surface the webapp already has:\n- Client.SetAnchor / AnchorStatus / SetEndorsement RPC wrappers, plus\n  ed25519_pub on IdentityResponse and the AnchorStatusResponse type.\n- anchor.go: Ed25519 anchor keygen, the 58-byte 'bramble-endorse-v1'\n  endorsement \n[…]\nhared\n  fixed vector reproduces the firmware's and webapp's exact 64-byte\n  signature and anchor pubkey, so a cert this SDK signs is byte-accepted by\n  the device (verified end-to-end on a Heltec V4).",
          "is_bot": false,
          "headline": "feat(anchor): trust-anchor client methods, crypto, and cross-impl par…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-07-06T21:58:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10a37047056d73c27f1bec4aa767ea67b8ee226b",
          "body": "…es, GPS casing, transporttest, coder/websocket)' (#33) from feat/api-polish into main",
          "is_bot": false,
          "headline": "Merge pull request 'feat(api): pre-1.0 API surface polish (Get prefix…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-13T00:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "163e914d1a5a1018019642eef49b0ec2ade47581",
          "body": "…ttest, coder/websocket)\n\nBreaking changes, intentionally landed before any public release:\n\n- Drop Get prefixes on all client query methods: WifiStatus, Battery,\n  GPSPosition, BeaconPolicy, AudioStatus, StorageInfo, Diagnostics,\n  AuthToken, TrafficDebug, TrafficEvents (and the matching\n  TrafficD\n[…]\n directive from the 1.26.1 patch pin to a 1.25.0 floor.\n- Update README, docs/API.md, and examples to the new surface; add the\n  missing OnPeerLocation/OnIdentityChange rows to the callback reference.",
          "is_bot": false,
          "headline": "feat(api): pre-1.0 surface polish (Get prefixes, GPS casing, transpor…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T23:54:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "199545b12c954e6bab80f2ecaad0e02382b573d2",
          "body": "…from chore/repo-hygiene into main",
          "is_bot": false,
          "headline": "Merge pull request 'chore: repo hygiene pass (workstream 0.4)' (#32) …",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T06:58:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3c73ca3d46e90752702d859b133a15e6ba2ccc8",
          "body": "SDKVersion still said 0.5.0 while release tags reached v0.9.0. Release\nnotes are generated by semantic-release on the Gitea releases page, and\nthe in-repo changelog had drifted (entries for v0.6.0 through v0.9.0 sat\nunder 'Unreleased'); the README now points at Gitea releases instead.",
          "is_bot": false,
          "headline": "chore(release): bump SDKVersion to 0.9.0 and drop stale CHANGELOG.md",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T06:20:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "945b8ca899fd5800833b5e1747cd3a903408b59d",
          "body": null,
          "is_bot": false,
          "headline": "chore: ignore stray bramble binary at repo root",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T06:20:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba02449348fbe1d88c0c276183772db8820f59d6",
          "body": "- install golangci-lint from the v2 module path with a cached version\n  marker so the runner replaces the stale v1.64.8 binary\n- add a 'go mod tidy -diff' step to the vet job\n- update the README lint contract from v1.64.8 to v2.11.4",
          "is_bot": false,
          "headline": "ci: pin golangci-lint v2.11.4 and check go.mod tidiness",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T06:20:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68128b111866541531b3db7fd51dfafd263fc5f5",
          "body": "- .golangci.yml: v2 schema, 'standard' default linter set (previous four\n  linters plus errcheck)\n- explicitly discard deferred Close errors in tests and examples (errcheck)\n- drop redundant embedded-field selector and use a tagged switch in\n  transport/ble.go (staticcheck QF1008/QF1003)\n- gofmt types.go",
          "is_bot": false,
          "headline": "chore(lint): migrate golangci-lint config to v2 schema and fix findings",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T06:20:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f4cf1fe2278168bc04f042639bf8b8d22f32fa9",
          "body": "The Send signature gained a context parameter in 0c57012 but this\ncallsite was missed, so 'go test ./transport' failed to compile on main.",
          "is_bot": false,
          "headline": "fix(test): pass context to BLE Send in reconnecting test",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-06-12T06:20:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcd83c687767f278a3aa2e172fa79c0923ae010b",
          "body": "…IdentityChange notifications' (#31) from task/c45-add-sdk-handlers-for-onpeerlocation-and-oniden-cb0d086e into main",
          "is_bot": false,
          "headline": "Merge pull request 'feat(sdk): add handlers for onPeerLocation and on…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-26T02:38:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31bfba58a31c4bf8adf46ac255e10af26b15103c",
          "body": "…ications\n\n- Add PeerLocationEvent and IdentityChangeEvent types to types.go\n- Add onPeerLocationFn and onIdentityChangeFn callback fields to Client\n- Handle bramble.onPeerLocation (null params) and bramble.onIdentityChange\n  in notifyLoop\n- Add OnPeerLocation and OnIdentityChange methods for callba\n[…]\nnctional option wiring\n\nFirmware sends onPeerLocation with null params on every received peer\nlocation update; onIdentityChange carries new_address+reason on address\ncollision re-keying. Resolves C45.",
          "is_bot": false,
          "headline": "feat(sdk): add handlers for onPeerLocation and onIdentityChange notif…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-25T18:05:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3c95fffc017e03597446c9f8bcbdc2bc6998f67",
          "body": "…opulate changelog (audit D27, D30)' (#30) from docs/audit-d27-api-reference into main",
          "is_bot": false,
          "headline": "Merge pull request 'docs: add 15 missing public methods to API.md + p…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-24T17:53:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fc44b646edcbec3a3764d2a3e15650968073ba7",
          "body": "…D30)",
          "is_bot": false,
          "headline": "docs: populate [Unreleased] changelog with March 2026 entries (audit …",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-24T17:50:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b793928d7ebcd4062ae3a04fdbbef1fa7655d97",
          "body": null,
          "is_bot": false,
          "headline": "docs: add 15 missing public methods to API.md (audit D27)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-24T17:50:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dee95e5b8982375084796fa64d19209b0af501dd",
          "body": "…' (#29) from task/c43-add-getauthtoken-to-ble-transport-for-symmetry-f477ec20 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/29",
          "is_bot": false,
          "headline": "Merge pull request 'fix(transport): add GetAuthToken to BLE transport…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T20:01:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f7518de458b0d3ea9f556f92b2803518ea3bff4",
          "body": "…nd fixtures' (#28) from task/c38-fix-location-tier-mismatch-between-cli-docs-an-bff62abc into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/28",
          "is_bot": false,
          "headline": "Merge pull request 'fix(location): align SDK location tier examples a…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:47:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f27a8cdf6e291906a4cbf693ef15fab6ff291b91",
          "body": "…hooks' (#27) from task/c40-add-ondisconnect-onreconnect-hooks-to-ble-tran-54135d8f into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/27",
          "is_bot": false,
          "headline": "Merge pull request 'fix(transport): add BLE OnDisconnect/OnReconnect …",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:47:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0f1fa8b83d3a1a24d5d6eac18fc9052dde677fd",
          "body": null,
          "is_bot": false,
          "headline": "fix(transport): add BLE GetAuthToken for transport symmetry",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6b233b56b36e0810504d8d69965bf8bc0f0c9e4",
          "body": null,
          "is_bot": false,
          "headline": "fix(location): align sdk location tier examples and fixtures",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:46:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa6bbc6d9e4f123bfc6fcf8a940a3f652d01699f",
          "body": "… (#26) from task/c42-fix-websocket-send-to-respect-caller-context-i-840915f8 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/26",
          "is_bot": false,
          "headline": "Merge pull request 'fix(transport): propagate caller context in Send'…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:46:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69131c7ce1e7352534ecafe29ae1a4f5dd07f395",
          "body": "…ct coverage (T29)' (#24) from test/ble-auth-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/24",
          "is_bot": false,
          "headline": "Merge pull request 'test(transport): add BLE auth handshake and Conne…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:45:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "211d343101b21f0b7bbc9b36926980e45997034a",
          "body": "… for godoc' (#25) from task/c41-fix-broadcast-deprecation-comment-to-godoc-for-70779ecf into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/25",
          "is_bot": false,
          "headline": "Merge pull request 'fix(client): format Broadcast deprecation comment…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:45:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72d9bfaee2f73b30456b6631f6d71a1f8477081e",
          "body": null,
          "is_bot": false,
          "headline": "fix(transport): add BLE disconnect and reconnect hooks",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:45:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c570126fdb68662ed79bd267b91daa21448aa66",
          "body": null,
          "is_bot": false,
          "headline": "fix(transport): propagate caller context through Send",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:44:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "894a9a4a703f93fd750f112dba364381dc04941d",
          "body": null,
          "is_bot": false,
          "headline": "fix(client): format Broadcast deprecation as godoc",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-22T19:41:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "608e858b99f350f20ea4de65c6b9aa8ae8babc27",
          "body": "Add five new tests to improve coverage of authenticate() (from 0%)\nand Connect() beyond the already-connected guard:\n\n- TestBLEAuthenticate_NoToken: authenticate() exits immediately with no\n  auth token configured (covers the early-return path)\n- TestBLEAuthenticate_SendFails: authenticate() wraps E\n[…]\nh)\n\nThe remaining authenticate() paths (Receive timeout, validateAuthResponse)\nand Connect() scan/GATT paths require real BLE hardware or a production-code\nabstraction hook and are not exercised here.",
          "is_bot": false,
          "headline": "test(transport): add BLE auth handshake and Connect coverage (T29)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-19T21:31:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb96e9890e35e9b37f6625927d2b4d7075392005",
          "body": "…23) from fix/audit-c31-c34-c37 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/23",
          "is_bot": false,
          "headline": "Merge pull request 'fix(sdk): address audit findings C31-C34, C37' (#…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-19T18:12:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07c377373b23d93e0c4e0a35e0a11dc756cd0b85",
          "body": "C31: SetNodeName godoc now says max 32 chars (matching firmware)\nC32: LocationEvent.Tier changed from int to LocationTier (string type)\n     with constants and UnmarshalJSON handling both int and string\n     wire formats (firmware notification sends int, RPCs send string)\nC33: ProbeComplete expanded\n[…]\nKhz/FreqMhz fields\n     retained as deprecated with fallback in SetRadio()\nC37: GpsPosition.Timestamp documented as Unix seconds (not ms) to clarify\n     the naming inconsistency with other _ms fields",
          "is_bot": false,
          "headline": "fix(sdk): address audit findings C31-C34, C37",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-19T18:09:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a38def1f6502f051d6fdd9cacec7027e92a743e7",
          "body": "… in DeliveryEvents' (#16) from fix/delivery-events-param-case into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/16",
          "is_bot": false,
          "headline": "Merge pull request 'fix(client): use snake_case since_event_seq param…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T19:19:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8537d3a6e5a953092690ab5db5f9d8a28ce4dd98",
          "body": "… with payload context' (#17) from fix/notify-decode-logging into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/17",
          "is_bot": false,
          "headline": "Merge pull request 'fix(notify): log JSON decode errors in notifyLoop…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T19:19:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ce84a5b9fa8c5b6818ac00609abc34c8f0ccfa9",
          "body": "… *int (C25)' (#18) from fix/sendresult-channel-pointer into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/18",
          "is_bot": false,
          "headline": "Merge pull request 'fix(types): change SendResult.Channel from int to…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T19:19:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1eef2f5debf4abca3b1e85324afe0df96fc14ddc",
          "body": "…orted across all transports' (#20) from fix/transport-token-encapsulation into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/20",
          "is_bot": false,
          "headline": "Merge pull request 'refactor(transport): make auth token fields unexp…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T19:19:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df771f9e9ef39baf80b34914896b31cb31c1be35",
          "body": null,
          "is_bot": false,
          "headline": "ci(commitlint): pin to 19.6.0 to avoid tinyexec ESM breakage (#22)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T19:07:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edd64997dc7a54a9e0c48972ccae1497888bff6f",
          "body": "…nsports\n\nWebSocket.AuthToken and Serial.AuthToken were exported (public) fields\nwhile BLE kept its token unexported via BLEConfig.AuthConfig.\n\nThis change:\n- Renames Serial.AuthToken → authToken (unexported)\n- Renames WebSocket.AuthToken → authToken (unexported)\n- Adds GetAuthToken() accessor metho\n[…]\ne private field names\n\nAll three transports now use consistent unexported encapsulation\nfor auth token storage. Access is via SetAuthToken/GetAuthToken\nmethods or the WithAuthToken constructor option.",
          "is_bot": false,
          "headline": "refactor(transport): make auth token fields unexported across all tra…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T18:08:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b6effe100ce1bc633343e6b858735f58fd8089d",
          "body": "- Add notifyDecode() helper that logs a structured slog.Warn on\n  unmarshal failure, including up to 512 bytes of the raw payload\n- Add OnDecodeError() callback so callers can observe decode failures\n  without affecting the connection\n- Replace silent if json.Unmarshal(...) == nil patterns throughou\n[…]\nfires, contains method/error/payload, and connection stays\n  alive for subsequent valid notifications\n- Add TestClient_OnDecodeError_PayloadTruncated: verifies payload\n  snippet is capped at 512 bytes",
          "is_bot": false,
          "headline": "fix(notify): log JSON decode errors in notifyLoop with payload context",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T18:08:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "957ba8ee8b7dc94c58b0d90c1bf8a9384027c00d",
          "body": "Zero value int was ambiguous: callers could not distinguish 'no\nchannel info returned by firmware' (should be nil) from 'channel\nindex 0' (a valid channel). Using *int resolves this:\n- nil  → channel field absent in firmware response\n- *int == 0 → firmware explicitly returned channel 0\n- *int == N →\n[…]\nresence should use:\n  if res.Channel != nil { ch := *res.Channel }\n\nThis is a BREAKING change (bumps to next minor). Existing callers\nthat compare .Channel == 0 must be updated to check for nil first.",
          "is_bot": false,
          "headline": "fix(types): change SendResult.Channel from int to *int",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T18:08:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "34de8aa265215f70bfcb5cedb68e8845b955a4e6",
          "body": "Change sinceEventSeq to since_event_seq to match the snake_case\nconvention used by all other SDK methods. Firmware accepts both\nbut consistency requires snake_case.\n\nFirmware RPC handler (rpc_methods.c:221-222) already supports\nboth keys; this change aligns the SDK with the documented convention.",
          "is_bot": false,
          "headline": "fix(client): use snake_case since_event_seq param in DeliveryEvents",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T18:08:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "015f3abcf483b7d08ae19c2e95f55d25336cfd4c",
          "body": null,
          "is_bot": false,
          "headline": "ci(commitlint): fix stale cache causing tinyexec module-not-found (#21)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T18:06:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "095da2f0d4e1fe82f67f3ae78bc7aafb4a67ba73",
          "body": "…onal Option pattern (C23)' (#19) from fix/ble-options-pattern into main",
          "is_bot": false,
          "headline": "Merge pull request 'feat(transport): refactor NewBLE to accept functi…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T17:55:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "772abe89423d0021afb0b892cd7411f1062d8d96",
          "body": "Refactors NewBLE(BLEConfig) to NewBLE(deviceName string, opts ...Option)\nto match the variadic functional pattern used by NewSerial and NewWebSocket.\n\n- Added applyBLE(*BLE) to the Option interface and option struct\n- WithAuthToken now applies to BLE transport (was silently ignored before)\n- Added W\n[…]\newBLE_DefaultScanTimeout, TestBLENewBLE_MultipleOptions\n\nFixes audit finding C23 (HIGH): BLE transport did not accept Options pattern,\ncausing WithAuthToken() to silently not apply to BLE connections.",
          "is_bot": false,
          "headline": "feat(transport): refactor NewBLE to accept functional Option pattern",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-13T17:51:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "588762e5f9185228ea408e897a5b5a5a18f0ffc9",
          "body": "…DME' (#15) from fix/doc-audit-d14-d19 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/15",
          "is_bot": false,
          "headline": "Merge pull request 'docs: fix SetNodeName max chars, add examples REA…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-10T17:34:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78a666126d4cc3fda8683afe59db16be82693b36",
          "body": "Audit findings D14, D19:\n- API.md: SetNodeName documented as max 8 chars but firmware\n  defines BRAMBLE_NODE_NAME_MAX=32\n- examples/: add README with directory index and usage instructions",
          "is_bot": false,
          "headline": "docs: fix SetNodeName max chars (8→32), add examples README",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-10T17:19:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "669f6cc6cdd4e9ff949c52f3e716864ccd72677d",
          "body": "…ransports' (#14) from feature/transport-auth-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/14",
          "is_bot": false,
          "headline": "Merge pull request 'test(transport): add auth token coverage across t…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-09T17:14:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20d45a8842313c8beeff3cad3c0b6ac085a246b9",
          "body": null,
          "is_bot": false,
          "headline": "test(transport): cover auth token setters across transports",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-09T17:12:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7eb275022a697c9f98a267e36b7245bef413a8e",
          "body": "…(#13) from ci/add-dispatch-trigger into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/13",
          "is_bot": false,
          "headline": "Merge pull request 'ci: add workflow_dispatch trigger to go-quality' …",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-08T00:05:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ad38fe08339dbce5b7f0177ef204ac148514a5e",
          "body": null,
          "is_bot": false,
          "headline": "ci: replace setup-go with direct toolcache usage, download fallback",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-08T00:04:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d57d2800e1168bcbeb1ab01dbcd864a57f3078c",
          "body": null,
          "is_bot": false,
          "headline": "ci: fix toolcache permissions for setup-go on self-hosted runners",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-08T00:01:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c62cfb26660cdd1fc5ae4c677d5f544b9bd215a",
          "body": null,
          "is_bot": false,
          "headline": "ci: retrigger after runner image update",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T23:56:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b92bbe6c7931711e8ce80fd283338004cc17452c",
          "body": null,
          "is_bot": false,
          "headline": "ci: add workflow_dispatch trigger to go-quality",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T23:54:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec9bdb09a67a3c050001f2e436f15dfb61fea1dc",
          "body": "…d/go-1.26.1 into main",
          "is_bot": false,
          "headline": "Merge pull request 'build: bump Go minimum to 1.26.1' (#12) from buil…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T23:18:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d16063c20493deecc27c62fd0af8300753b73c24",
          "body": "Fixes GO-2026-4599, GO-2026-4600, GO-2026-4601, GO-2026-4602\n(crypto/x509 and os/net/url stdlib vulnerabilities).",
          "is_bot": false,
          "headline": "build: bump Go minimum to 1.26.1",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T23:17:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c0b96d18bc5a5e1c27fd08b9de8304018379f34",
          "body": null,
          "is_bot": false,
          "headline": "feat(client): add GetAuthToken() for serial pairing (#11)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T21:40:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d62de8ccd3da5fb88da1a7d3a76d18c25058d7b",
          "body": null,
          "is_bot": false,
          "headline": "transport: add SetAuthToken to Transport interface (#10)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T20:05:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec3f2c653e39f9cfe6f50216467daaacc105f359",
          "body": null,
          "is_bot": false,
          "headline": "Add Go SDK wrappers for missing firmware RPC methods (#9)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T20:01:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e27650f8b16e8979bd957f24353c9b683ff7f5b",
          "body": null,
          "is_bot": false,
          "headline": "Fix IsCompatible semver comparison for protocol versions (#6)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T19:57:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2a8f90416c16d9d50375bdc07f6145aa5fbe1c4",
          "body": null,
          "is_bot": false,
          "headline": "feat(client): expose full setLocationContact fields (#8)",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T19:57:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7cbced984eac95f3f0dd0659338f296ddaf8056e",
          "body": "…imestamp overflow (#7)",
          "is_bot": false,
          "headline": "fix(types): remove unused LocationContact and prevent LocationEvent t…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-07T19:57:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1296798d8aaae685580be478a42d79d156bcfeb",
          "body": "…cket + serial' (#5) from feature/ws-serial-auth-token into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/5",
          "is_bot": false,
          "headline": "Merge pull request 'feat(transport): add shared auth option for webso…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T22:06:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6a4b0702cd80337a4969032bcffa05b9eca4321",
          "body": null,
          "is_bot": false,
          "headline": "feat(transport): share auth option across serial and websocket",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T21:10:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97e696c098d85e859b7ad3181788aa49437329d5",
          "body": "…date channel-critical broadcast' (#4) from feature/serial-and-broadcast-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/4",
          "is_bot": false,
          "headline": "Merge pull request 'test: increase serial transport coverage and vali…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T20:54:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2bab878fc69ebc509e286bf3b8b3f6b7ae0bf44",
          "body": "…adcast",
          "is_bot": false,
          "headline": "test: raise serial transport coverage and assert critical channel bro…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T20:53:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7842e7619cdac8b7e85267f320ab3b9f12c6257",
          "body": "Addresses audit findings from 2026-03-06 Test Coverage Round 3:\n- Serial transport: Connect, sendAuth, readAuthResponse, reader, WithAuthToken\n  all brought from 0% to 59-100% coverage\n- BroadcastOnChannelCritical: 0% to 100% coverage\n- Transport package overall: 55.7% to 66.8%",
          "is_bot": false,
          "headline": "test: add serial transport and BroadcastOnChannelCritical coverage",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T20:50:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bde80292d6c08a76e270e1ad6b0f27a4bfcf88ed",
          "body": "…m docs/fix-stale-api-doc-comments into main",
          "is_bot": false,
          "headline": "Merge pull request 'docs: fix 5 stale comment/API doc items' (#3) fro…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T09:17:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da8dbe9093033789b62796a60d7f3ba35ce8bf7d",
          "body": null,
          "is_bot": false,
          "headline": "docs: fix stale BLE/API comments and type snippets",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T08:51:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "095647ff3f61a7276e7427a3e623c15848e82ac2",
          "body": "Firmware already returns status (none/sent/delivered/failed) in\nbramble.getMessages — the SDK just wasn't capturing it.",
          "is_bot": false,
          "headline": "types: add Status field to Message struct",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-06T08:25:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef693efbd0cb89e5240c29f22ed23bd10896e107",
          "body": "…ure/go-quality-ci into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/2",
          "is_bot": false,
          "headline": "Merge pull request 'ci: add go quality required gates' (#2) from feat…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:34:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a9ed13cc4dad0b1dc7488587868416c98b9d33e",
          "body": "This reverts commit d46c02f430eb80de0b8184344368436c2102e089.",
          "is_bot": false,
          "headline": "Revert \"test(ci): inject intentional ineffassign lint failure\"",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:32:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d46c02f430eb80de0b8184344368436c2102e089",
          "body": null,
          "is_bot": false,
          "headline": "test(ci): inject intentional ineffassign lint failure",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:31:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbd9bbd677a9069124c5dd0616655210a4091c87",
          "body": null,
          "is_bot": false,
          "headline": "ci(go): run golangci-lint via runner-built binary",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:22:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "168a21ee213f633dd06410f85274e54f9294d720",
          "body": null,
          "is_bot": false,
          "headline": "ci(go): install golangci-lint via goinstall for Go 1.25 compatibility",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:19:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0df44f7c59f8cd5625d30a9e0865ebd67ebf0a6e",
          "body": null,
          "is_bot": false,
          "headline": "ci(go): bump golangci-lint to v1.64.8 for Go 1.25 compatibility",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:13:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "562da4f2d30ab90cafdf5e8bcd21e9e09acb795b",
          "body": null,
          "is_bot": false,
          "headline": "ci: stop forcing missing commitlint config file",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T21:02:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "478f6f8fbea30d45e930dcb94c22a47cdf377f5c",
          "body": null,
          "is_bot": false,
          "headline": "ci: use runner-local caches and fix commitlint resolution",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:59:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce6f731e66119ff4eadc242daf6ccc8ecdcca482",
          "body": null,
          "is_bot": false,
          "headline": "ci: build golangci-lint with runner go toolchain",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:56:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c93a9bb16fd8ec2923fa558db1ca2a6f3c327bc2",
          "body": null,
          "is_bot": false,
          "headline": "ci: add deterministic workflow caches for go and node tools",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:48:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb684b84420afe89ecf8fac1c83b25ae59f4386a",
          "body": null,
          "is_bot": false,
          "headline": "fix: resolve go-quality lint findings for CI gate",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:42:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd5bc625fce6f3f533f7d992e001998c9551f0b7",
          "body": null,
          "is_bot": false,
          "headline": "ci: add required go quality workflow gates",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:40:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74c76ac305e8161d7b1328f1a6f7c891e5c30b29",
          "body": null,
          "is_bot": false,
          "headline": "ci: define local go quality command contract",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:37:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e38c193ff5b9f420d92bc0175c565c4de2ebb164",
          "body": "… fix/ci-runner-recovery into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/1",
          "is_bot": false,
          "headline": "Merge pull request 'ci: validate runner recovery workflows' (#1) from…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:32:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e45b4f26551fdbd2aea7ec074e835fa677483e4a",
          "body": null,
          "is_bot": false,
          "headline": "ci: make release workflow routable and fail-fast",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:28:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be7f849abcf6a1db4fb3b599398d34c92648b3c7",
          "body": null,
          "is_bot": false,
          "headline": "ci: fix commitlint runner and deterministic event handling",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T20:27:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a9e486dabd3ff30a54e1923f821ee81c102a0a4",
          "body": null,
          "is_bot": false,
          "headline": "fix(protocol): retry RPC sends during websocket reconnect",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T07:02:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4549b6cd1fd6258e5491b2b6851314e7af62eff",
          "body": null,
          "is_bot": false,
          "headline": "docs(api): include GetDiagnostics in query methods",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-04T06:10:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97a0dc79265b76c6faaef9693dc84a29becb1f5d",
          "body": null,
          "is_bot": false,
          "headline": "Merge auth-token-support: transport auth token support",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-03T00:44:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83c3b38bed74ebc5085ab07009f212ca1f10f34e",
          "body": null,
          "is_bot": false,
          "headline": "feat(transport): add auth token support to all transports",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-02T18:52:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dda3046b3b6475984899314a62d123923d6dcab",
          "body": null,
          "is_bot": false,
          "headline": "Merge readme-rework: streamlined README with API docs split",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-02T10:07:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97740d1d660bb5576156516a6016b8257c563484",
          "body": null,
          "is_bot": false,
          "headline": "docs(readme): streamline README and move full API reference",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-02T09:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f6d8d68138647b919938b517495cd4923c0d497",
          "body": "…lic release",
          "is_bot": false,
          "headline": "docs(readme): replace internal URLs with YOUR-ORG placeholder for pub…",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-02T06:50:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d5dcb756644ef227a70ad856871573a5f0f8633",
          "body": null,
          "is_bot": false,
          "headline": "docs(readme): remove internal note and fix license section",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-02T06:49:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a9eff6e0ea163eb5d3cd42a037026cddf016d24",
          "body": null,
          "is_bot": false,
          "headline": "chore: clean up repo for public release",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-02T06:47:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea6b565b5de1dcb31322c6b76742c9ed87b86121",
          "body": null,
          "is_bot": false,
          "headline": "feat(sdk): align with bramble.getDiagnostics RPC and bump SDK minor",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-01T23:37:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42e42c3e84191323fa960b61cc34ecb5ceaf446f",
          "body": null,
          "is_bot": false,
          "headline": "docs(readme): document missing client APIs and callbacks",
          "author_name": "Justin Lindh",
          "author_login": "justinlindh",
          "committed_at": "2026-03-01T20:34:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 138,
      "latest_release_at": "2026-07-18T06:02:20Z",
      "latest_release_tag": "v0.12.2",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 11,
      "days_since_latest_release": 4,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/justinlindh/bramble-go",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/justinlindh/bramble-go",
          "is_deprecated": false,
          "latest_version": "v0.12.2",
          "repository_url": "https://github.com/justinlindh/bramble-go",
          "versions_count": 22,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-18T06:01:15Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 35765,
      "source_files_sampled": 31,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/coder/websocket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.14"
        },
        {
          "name": "go.bug.st/serial",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.4"
        },
        {
          "name": "tinygo.org/x/bluetooth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 2,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "justinlindh",
          "commits": 138,
          "avatar_url": "https://avatars.githubusercontent.com/u/802578?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "claude.yml",
        "commitlint.yml",
        "go-quality.yml",
        "internal-refs.yml",
        "pr-template.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "e6b2f00c12ee90a4ebd4102c5d13176cc3c42e19",
        "ran_at": "2026-07-23T01:09:28Z",
        "aggregate_score": 3.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-19T07:08:34Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T07:06:58Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/justinlindh/bramble-go",
    "host": "github.com",
    "name": "bramble-go",
    "owner": "justinlindh"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 57,
      "inputs": {
        "security": 39,
        "vitality": 71,
        "community": 27,
        "governance": 53,
        "engineering": 86
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 138,
              "human_commit_share": 1,
              "days_since_last_push": 3,
              "active_weeks_last_year": 11
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "11/52 weeks with commits",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "138 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 138
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.12.2",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 27,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 53,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 2,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "2/2 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 2,
                      "decided": 2
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "followers": 11,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "justinlindh",
              "public_repos": 16,
              "account_age_days": 5541
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "11 followers of justinlindh",
                "points": 7.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 11,
                      "login": "justinlindh"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "16 public repos, account ~15 yr old",
                "points": 21,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 16
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/justinlindh/bramble-go"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "22 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 86,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "golang",
                "lora",
                "mesh-network",
                "sdk"
              ],
              "has_wiki": false,
              "homepage": "https://bramblemesh.org",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://bramblemesh.org",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "4 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 39,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 39,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 60,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.95,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "95 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 95,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 35765,
              "source_files_sampled": 31,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/31 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 31,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T01:09:34.271302Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/justinlindh/bramble-go.svg",
  "full_name": "justinlindh/bramble-go",
  "license_state": "standard",
  "license_spdx": "MIT"
}

相关记录

与 justinlindh/bramble-go 共享目录标签或生态系统的已检测仓库。 并排阅读 →

84getSentry/sentry-goThe official Go SDK for Sentry (sentry.io)良好87Azure/azure-sdk-for-goThis repository is for active development of the Azure SDK for Go. For consumers of the SDK we recommend visiting our public developer docs at:优秀91coder/coderSecure environments for developers and their agents优秀90gofiber/fiber⚡️ Express inspired web framework written in Go优秀90mattermost/mattermostMattermost is an open source platform for secure collaboration across the entire software development lifecycle..优秀89smartcontractkit/chainlinknode of the decentralized oracle network, bridging on and off-chain computation优秀

评分是信号，而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计，也不是安全保证。

缺失数据将被剔除并重新归一化权重，绝不按零分计。方法论已版本化并公开：指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置： 汇总统计 — Go.