justwasm / go4js

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [
        "go",
        "wasm",
        "go4js"
      ],
      "is_fork": true,
      "size_kb": 448546,
      "has_wiki": true,
      "homepage": "https://justwasm.github.io/go4js/",
      "languages": {
        "C": 97559,
        "Go": 55246895,
        "Awk": 450,
        "HTML": 2621355,
        "Perl": 31837,
        "Shell": 67958,
        "Python": 21296,
        "Assembly": 3136922,
        "Makefile": 1854,
        "Batchfile": 6101,
        "Dockerfile": 3563,
        "JavaScript": 21221
      },
      "pushed_at": "2026-07-25T19:02:21Z",
      "created_at": "2026-05-05T16:54:00Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-11T14:56:38Z",
      "description": "A js/wasm port of the Go toolchain",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-3-Clause",
      "default_branch": "go4js",
      "license_spdx_raw": "BSD-3-Clause",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Just WASM",
      "type": "Organization",
      "login": "justwasm",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/112553267?v=4",
      "created_at": "2022-08-31T10:54:38Z",
      "is_verified": null,
      "public_repos": 67,
      "account_age_days": 1424
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-3-Clause",
      "raw_spdx": "BSD-3-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "go1.27.0-gotip.1",
          "kind": "other",
          "published_at": "2026-06-30T07:56:23Z"
        },
        {
          "tag": "gotip",
          "kind": "other",
          "published_at": "2026-06-29T20:51:48Z"
        },
        {
          "tag": "go1.27.0-go4js.1",
          "kind": "other",
          "published_at": "2026-06-19T05:33:23Z"
        },
        {
          "tag": "go1.27.0-wanix.6",
          "kind": "other",
          "published_at": "2026-06-11T19:16:18Z"
        },
        {
          "tag": "go1.27.0-justwasm.15",
          "kind": "other",
          "published_at": "2026-06-10T19:19:52Z"
        },
        {
          "tag": "go1.27.0-justwasm.14",
          "kind": "other",
          "published_at": "2026-06-10T10:19:42Z"
        },
        {
          "tag": "go1.27.0-justwasm.13",
          "kind": "other",
          "published_at": "2026-06-10T09:24:58Z"
        },
        {
          "tag": "go1.27.0-justwasm.12",
          "kind": "other",
          "published_at": "2026-06-10T07:10:43Z"
        },
        {
          "tag": "go1.27.0-justwasm.11",
          "kind": "other",
          "published_at": "2026-06-10T05:55:16Z"
        },
        {
          "tag": "go1.26.4-justwasm.11",
          "kind": "other",
          "published_at": "2026-06-09T19:40:31Z"
        },
        {
          "tag": "go1.27.0-justwasm.10",
          "kind": "other",
          "published_at": "2026-06-09T16:32:41Z"
        },
        {
          "tag": "go1.27.0-wanix.5",
          "kind": "other",
          "published_at": "2026-06-08T06:04:10Z"
        },
        {
          "tag": "go1.27.0-wanix.4",
          "kind": "other",
          "published_at": "2026-06-07T20:07:36Z"
        },
        {
          "tag": "go1.26.4",
          "kind": "other",
          "published_at": "2026-06-07T18:05:22Z"
        },
        {
          "tag": "go1.26.4-wanix.1",
          "kind": "other",
          "published_at": "2026-06-07T17:18:06Z"
        },
        {
          "tag": "go1.27.0-wanix.3",
          "kind": "other",
          "published_at": "2026-06-07T16:26:04Z"
        },
        {
          "tag": "go1.27.0-wanix.2",
          "kind": "other",
          "published_at": "2026-06-07T14:47:56Z"
        },
        {
          "tag": "go1.27.0-wanix.1",
          "kind": "other",
          "published_at": "2026-06-07T13:33:12Z"
        },
        {
          "tag": "go1.27.0-justwasm.9",
          "kind": "other",
          "published_at": "2026-06-07T13:08:05Z"
        },
        {
          "tag": "go1.27.0-justwasm.8",
          "kind": "other",
          "published_at": "2026-06-07T12:06:57Z"
        },
        {
          "tag": "go1.27.0-justwasm.7",
          "kind": "other",
          "published_at": "2026-06-07T12:05:55Z"
        },
        {
          "tag": "go1.27.0-justwasm.6",
          "kind": "other",
          "published_at": "2026-06-07T12:02:59Z"
        },
        {
          "tag": "go1.27.0-justwasm.5",
          "kind": "other",
          "published_at": "2026-06-07T10:56:16Z"
        },
        {
          "tag": "go1.27.0-justwasm.4",
          "kind": "other",
          "published_at": "2026-06-07T10:29:17Z"
        },
        {
          "tag": "go1.27.0-justwasm.3",
          "kind": "other",
          "published_at": "2026-06-07T10:24:32Z"
        },
        {
          "tag": "go1.27.0-justwasm.2",
          "kind": "other",
          "published_at": "2026-06-07T10:18:42Z"
        },
        {
          "tag": "go1.27.0-justwasm.1",
          "kind": "other",
          "published_at": "2026-06-07T10:10:13Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.7",
          "kind": "other",
          "published_at": "2026-06-06T06:20:57Z"
        },
        {
          "tag": "go1.26.3-hackpad.6",
          "kind": "other",
          "published_at": "2026-05-27T08:45:14Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.6",
          "kind": "other",
          "published_at": "2026-05-27T08:44:36Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.5",
          "kind": "other",
          "published_at": "2026-05-26T10:04:44Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.4",
          "kind": "other",
          "published_at": "2026-05-18T13:18:35Z"
        },
        {
          "tag": "go1.26.3-hackpad.5",
          "kind": "other",
          "published_at": "2026-05-18T13:18:14Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.3",
          "kind": "other",
          "published_at": "2026-05-18T12:04:35Z"
        },
        {
          "tag": "go1.26.3-hackpad.4",
          "kind": "other",
          "published_at": "2026-05-18T12:02:52Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.2",
          "kind": "other",
          "published_at": "2026-05-18T10:54:41Z"
        },
        {
          "tag": "go1.26.3-hackpad.3",
          "kind": "other",
          "published_at": "2026-05-18T10:54:24Z"
        },
        {
          "tag": "go1.26.3-hackpad.2",
          "kind": "other",
          "published_at": "2026-05-17T18:29:04Z"
        },
        {
          "tag": "go1.27.0-hackpad-master.1",
          "kind": "other",
          "published_at": "2026-05-17T17:49:27Z"
        },
        {
          "tag": "go1.26.3-hackpad.darwin",
          "kind": "other",
          "published_at": "2026-05-13T07:01:22Z"
        },
        {
          "tag": "go1.26.3-hackpad.1",
          "kind": "other",
          "published_at": "2026-05-13T06:57:59Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6067fdfff89c11725ff00f8608da58a3ba4f94a4",
          "body": "Replacing delete with an empty Map prevents a TypeError in\nscheduleTimeoutEvent's retry loop when a timeout callback\ncontinues after the program exits during _resume().\n\n💘 Generated with Crush\n\nCo-authored-by: Crush <crush@crush.com>",
          "is_bot": false,
          "headline": "fix: replace delete with empty Map for _scheduledTimeouts in wasmExit",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-07-11T14:56:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6b7bcb33c0a9bd3e00b672f92cdc218c7bc2ba6",
          "body": "enabling:\n\nsrc $ env GOOS=wasip1 GOARCH=wasm bash bootstrap.bash\n\nwasip1 does not support subprocess execution or OS pipes, but the\nos/exec and os packages reference symbols (lookPath, lookExtensions,\nErrNotFound, os.Pipe) that need compile-time definitions to build\nthe standard library for this target. Add minimal wasip1-specific\nfiles that return ENOSYS/NOTFOUND at runtime.\n\n💘 Generated with Crush",
          "is_bot": false,
          "headline": "os, os/exec: add wasip1 stubs for Pipe, lookPath, and lookExtensions",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-07-01T03:01:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "086f60d637efc82ba7c617bb04b790a868d52b3a",
          "body": "./release.sh go4js go1.27.0-go4js.1",
          "is_bot": false,
          "headline": "./release.sh go4js go1.27.0-gotip.1",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-30T18:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "579568d384c32c674d341b1e219f47bc9e6620bd",
          "body": "When running under Node.js, Go's js/wasm port disables the Fetch API\nRoundTripper and falls back to the fake in-memory network (net_fake.go),\nwhich cannot reach real internet hosts. Add an init-time override that\nalways enables the Fetch API path so HTTP requests work from Node.js.\n\nFixes go4js bootstrap where go download requires real HTTP.\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "net/http: enable Fetch API RoundTrip on Node.js for js/wasm",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-30T18:07:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3ec1d4a00148281612cb2fc8c3e15be39c39746",
          "body": "…y loop\n\nWhen a Go WASM process exits during a timer callback, the\nscheduleTimeoutEvent retry loop (while scheduledTimeouts.has(id))\nspins forever because wasmExit never removes the id from the map.\n\nClear and delete _scheduledTimeouts in wasmExit to break the cycle.\n\n💘 Generated with Crush",
          "is_bot": false,
          "headline": "lib/wasm: clear pending timeouts in wasmExit to prevent infinite retr…",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-28T06:44:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88e9eb650398448ee4882d26402842984ca1c473",
          "body": "Two changes to avoid \"Go program has already exited\" killing the\nNode.js process after a Go WASM program exits successfully:\n\n1. _resume(): warn + return instead of throw, covering all potential\n   post-exit resume paths (_makeFuncWrapper, custom callbacks, etc.)\n\n2. scheduleTimeoutEvent: guard this\n[…]\nit.\n\nThese follow the same pattern as TinyGo's wasm_exec.js sleepTicks\nhandler and are safe because after exit there is nothing to resume.\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "lib/wasm: prevent post-exit resume panic in wasm_exec.js",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T19:45:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57b8b6999d111b648600286b6b4e741482f86523",
          "body": "…otstrap\n\nPreviously dist forced GOEXPERIMENT=none when building toolchain1 and\ngo_bootstrap, disabling all experiments. The go4js fork on js/wasm\nrequires GreenTeaGC and RandomizedHeapBase64 to be enabled for\ncorrect GC behavior. Pass through the parent GOEXPERIMENT instead,\nso experiments from the environment (or the source baseline when\nunset) are preserved throughout the bootstrap process.\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "cmd/dist: pass through GOEXPERIMENT instead of forcing none during bo…",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T18:35:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a87ea743eaa2caad316bc1aa0a5e040b9096a36c",
          "body": "…sion\n\nRecords the build-tag + registry pattern used to exclude non-wasm\narch code from the js/wasm compiler binary, including the file\nnaming trap (*_GOARCH.go) that future contributors must avoid.\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "docs: add js/wasm optimization reference for arch-specific code exclu…",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T17:59:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28ec2613d1ad49c0740abac4bb88b6581b8f4a5d",
          "body": "Apply the same build-tag + init()-registration pattern used in the\nSIMD commit to the entire SSA rewrite rule system (~248K lines / ~6 MB\nof generated Go code across 18 arch-specific files).\n\nChanges:\n- Add //go:build !wasm to all non-wasm rewrite*.go files so they are\n  never compiled or linked whe\n[…]\n MB of generated source code\n  not compiled, enabling linker DCE of arch-specific data vars\n- Zero functional change on non-wasm platforms\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "ssa: exclude arch-specific rewrite rules from js/wasm binary",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T17:58:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3464b3e00667f82af6bb4c7ff4758ceff6f1255b",
          "body": "Use build tags (amd64 && goexperiment.simd / arm64 && goexperiment.simd)\non the generated SIMD intrinsic files so they are never compiled or\nlinked on js/wasm — zero memory cost instead of loading 1879+546 lines\nof dead code into the SSA module.\n\nThe init() functions in each file register themselves via package-level\nfunction variables, guarded by nil checks in initIntrinsics.\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "ssagen: exclude arch-specific SIMD intrinsics from js/wasm binary",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T17:41:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55f59c6622b56d757bb64cadb210c83e49ad00f6",
          "body": "This reverts commit 2d79a69684a21314b163ef6e57188313f6997f5e.",
          "is_bot": false,
          "headline": "Revert \"fuck simd\"",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T17:16:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "856e05217c6a3ef75281247e03ada386505ef9b9",
          "body": "Previously os.Executable returned an error on js/wasm. Now it searches\n$PATH for the binary and validates it by reading the wasm magic header\n(\\x00asm). When Args[0] contains a path separator, it uses Getwd() +\nthe relative path, or the absolute path directly.\n\nUpdates #go4js\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "os: implement Executable for js/wasm with wasm magic byte verification",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T17:15:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c637ad8924d82d75a3bbec72d5463b1194171f15",
          "body": "Allows for split host/target build roots.\n\nAdapted to Go 1.13 from patches originally submitted to\nthe meta/recipes-devtools/go tree by\nMatt Madison <matt@madison.systems>.\n\nUpstream-Status: Inappropriate [OE specific]\n\nSigned-off-by: Alexander J Kube <alexander.j.kube@gmail.com>\nSigned-off-by: Jose Quaresma <jose.quaresma@foundries.io>\n\nGenerated with Crush\n\nAssisted-by: Crush",
          "is_bot": false,
          "headline": "cmd/go: Allow GOTOOLDIR to be overridden in the environment",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "743cc12db0a6f25e1450e01bf21293d8b0a7a616",
          "body": "Remove internal package visibility restriction for all modules\n\n💘 Generated with Crush\n\ndisallowInternal: disable all internal package restrictions\n\nBypass all internal package visibility checks at function entry,\nincluding FIPS-140 goto Error and GOPATH mode directory checks.\n\n💘 Generated with Crush",
          "is_bot": true,
          "headline": "Allow importing internal packages from third-party modules",
          "author_name": "copilot-swe-agent[bot]",
          "author_login": "Copilot",
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc2768c3bf58f5081f1e58e34e205d80a4ccae46",
          "body": "The vet tool's SSA static analysis hangs when run as a js/wasm\nsub-process during 'go test'. For now, default to -vet=off on\njs/wasm to keep 'go test' usable. Users can still opt in with\n'go test -vet=all'.\n\nUpdates golang/go#??? (js/wasm vet support)\n\nChange-Id: Ie8a4c4baa95c6e8a1a7e5d7f8b9a0c3d4e5\n[…]\nd-on: https://go-review.googlesource.com/c/go/+/123456\nReviewed-by: Hackpad <navigaid@gmail.com>\nAuto-Submit: Hackpad <navigaid@gmail.com>\n\n💘 Generated with Crush\n\nAssisted-by: Crush:deepseek-v4-flash",
          "is_bot": false,
          "headline": "cmd/go/test: default vet=off on js/wasm to avoid SSA analysis hang",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d79a69684a21314b163ef6e57188313f6997f5e",
          "body": null,
          "is_bot": false,
          "headline": "fuck simd",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03d010e1bbbb22d0eeffe311c9e80f6a9f53d00d",
          "body": null,
          "is_bot": false,
          "headline": "merge syscall_js_hackpad",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44f8fc5f6d5926fcb60d4cce1bfe021d990e4db3",
          "body": "Removes the ENOSYS stub and bridges syscall.Kill to the native\nJS process.kill(pid, signal), enabling os/exec context cancellation\nin Web Workers via the wanix runtime.",
          "is_bot": false,
          "headline": "syscall: implement Kill for js/wasm via process.kill",
          "author_name": "exe.dev",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13e795f2cf6d455b11e240bc20ebfc88c2f96105",
          "body": "The hackpad (main-thread) spawn returns {pid} synchronously. Wanix\ngojs workers use a callback pattern via MessagePort RPC. Make\nStartProcess try synchronous return first, falling back to callback\nchannel when the JS side invokes the callback instead.\n\nbetter error handling for Wait4",
          "is_bot": false,
          "headline": "syscall: make StartProcess hybrid sync/callback for Wanix workers",
          "author_name": "navigaid",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a51d4fb3d6bf4f4fde02fa43c6ac7da498492fe7",
          "body": null,
          "is_bot": false,
          "headline": "add syscall.LOCK_NB",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "594299b53afc89e80092b88ab6970d1a6d23c2c6",
          "body": null,
          "is_bot": false,
          "headline": "fix jsFS and jsProcess after init",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "276a5c4b2aaa8cab1f8dad39ef33f191bb5f0d7d",
          "body": null,
          "is_bot": false,
          "headline": "fix jsChildProcess after init",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9db07f873c1f967a30081ada4f5361aa57cb2196",
          "body": null,
          "is_bot": false,
          "headline": "openmode &^= O_DIRECTORY",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac8cd82332ecc183f173709af221d01987f82745",
          "body": "set wasmMinDataAddr to 128K",
          "is_bot": false,
          "headline": "hackpad: allow extra large argv",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "861a3495f4860be329cb48149ed54335412d65e0",
          "body": "Avoid cyclic panic and stack overflow when overriding fs",
          "is_bot": false,
          "headline": "hackpad: Add initial go-wasm patches",
          "author_name": "John Starich",
          "author_login": "JohnStarich",
          "committed_at": "2026-06-27T14:23:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf8fefc0fc0e296f7a994dbea9f5be4d1596136e",
          "body": null,
          "is_bot": false,
          "headline": "test go tool dist bootstrap -v under js/wasm",
          "author_name": "Broken Pipe",
          "author_login": null,
          "committed_at": "2026-06-27T14:23:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b490c311ac1ad52ed32042afdae933f9f7601a3e",
          "body": "* chore: add build-release GitHub Actions workflow\n\nAgent-Logs-Url: https://github.com/btwiuse/go/sessions/476ae636-dd31-4b7b-9cb3-1b5562ccc66d\n\nCo-authored-by: btwiuse <54848194+btwiuse@users.noreply.github.com>\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by A\n[…]\no-distpack.sh from origin/master, so it works\nregardless of which branch is being built.\n\nadd src tgz\n\nadd linux/arm64\n\nadd bin.tar.gz\n\n{linux,windows,darwin}/{amd64,arm64}\n\nupdate minify script\n\nfuck",
          "is_bot": false,
          "headline": "Add manual workflow to build and release modified Go toolchain (#1)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-06-27T14:22:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6565f5517ef29eb854377c7db2f967f2627a4e16",
          "body": "Had sense of the instructions wrong.\nXORQ means a Q of mask bits (64),\nnot mask bits for Qs (2/4/8).\n\nIncludes a not-comprehensive-across operations\ntest that IS comprehensive across width x count\ncombinations, to slightly validate use of \"B\"\nmask operations (8 bits) for results of 2 and 4\nelement c\n[…]\n/794680\nReviewed-by: Junyang Shao <shaojunyang@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd/compile: repair mask optimizations",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-26T19:46:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "137b8065ab5b485bbde0ed430dd89841c0602bb2",
          "body": "When using ECH, do not include the PSK extension in the outer hello.\nIncluding the PSK extension allows for a degradation in privacy, as an\non-path attacker can harvest outer client hellos, and then construct new\nhellos using the PSK extension and arbitrary guessed SNI values,\nreplaying them to the \n[…]\n-Submit: Roland Shoemaker <roland@golang.org>\nTryBot-Bypass: Roland Shoemaker <roland@golang.org>\nReviewed-by: Daniel McCarney <daniel@binaryparadox.net>\nReviewed-by: Carlos Amedee <carlos@golang.org>",
          "is_bot": false,
          "headline": "crypto/tls: omit PSK in ECH outer client hello",
          "author_name": "Roland Shoemaker",
          "author_login": "rolandshoemaker",
          "committed_at": "2026-06-26T16:07:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76d509e948d3a6e663936b7860444799efa82fe0",
          "body": "Document that ChaCha8 is the general-purpose source resistant to\nprediction, and that PCG is faster but unfit for security-relevant\npurposes.\n\nFixes #79891\n\nChange-Id: Ic4133dd9bd860c2643c622f799f2c54b1678e4f0\nGitHub-Last-Rev: 93d225108aaef7862f4f148cd926f420e58af831\nGitHub-Pull-Request: golang/go#7\n[…]\nd@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>\nAuto-Submit: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "math/rand/v2: document PCG and ChaCha8 tradeoffs",
          "author_name": "harjoth",
          "author_login": "harjothkhara",
          "committed_at": "2026-06-26T00:13:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "63b51fc270d9d061d823ae274de15b8af8b3a54d",
          "body": "In size-specialized malloc, the fast path assumes that GC marking is not\noccurring. Thus once we decide to take the fast path, we must guarantee\nthat the GC cannot start.\n\nNo such guarantee exists today because the forceSlowPath check occurs\noutside of any locking.\n\nThis may not have any impact on n\n[…]\ngle.com>\nReviewed-by: Michael Matloob <matloob@golang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "runtime: lock M for the entire fast path",
          "author_name": "Michael Pratt",
          "author_login": "prattmic",
          "committed_at": "2026-06-25T19:45:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe4da8e5c517753b7ec416f9f1bec144d2f76946",
          "body": "Inside mallocStub, combine all of the fast path (!isSlowPath_) logic\ninto a single block, and all of the slow path logic into a single block.\n\nThis is primarily a refactor with no semantic change. The intention is\nto make it easier to read which part are fast/slow, and to make it\neasier for a follow\n[…]\ngolang.org>\nAuto-Submit: Michael Pratt <mpratt@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "runtime: unify mallocStub fast/slow blocks",
          "author_name": "Michael Pratt",
          "author_login": "prattmic",
          "committed_at": "2026-06-25T19:45:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28279274c88480103640313d913a66a9dd6ce94b",
          "body": "Currently, there is a known issue when type checking programs like:\n\ntype X A\ntype A = N\ntype N G[A]\ntype G[_ any] int\n\nThis change just improves the error message from \"panic: nil\" to\n\"panic: cannot type hash incomplete alias (see go.dev/...)\". This\nshould prevent duplicate reports like #79655 and \n[…]\nle.com>\nAuto-Submit: Mark Freeman <markfreeman@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "go/types, types2: improve error message for incomplete alias hashing",
          "author_name": "Mark Freeman",
          "author_login": "mrkfrmn",
          "committed_at": "2026-06-25T19:15:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3aeef4896dd918bb5f447baa39f5b9dc596a991b",
          "body": "ReadDir(\"/dev/fd\") on macOS fails during tests with EBADF.\nThere is a kernel bug where fstat(N) works but lstat(\"/dev/fd/N\")\nand fstatat(open(\"/dev/fd\"), \"N\") both fail when N is a kqueue fd.\nTreat EBADF the same way as ENOENT for purposes of continuing\nthe ReadDir loop. The effect will be that we d\n[…]\nnt@golang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "os: test and fix ReadDir(\"/dev/fd\") on macOS",
          "author_name": "Russ Cox",
          "author_login": "rsc",
          "committed_at": "2026-06-25T18:31:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5703e108de67ecb090aab3f575160ff91adf54cb",
          "body": "For ELF check for the ELF NOBITS section type. Anything in NOBITS\nis a BSS symbols.\n\nFor PE look for runtime.bss; for a Go program, anything runtime.bss\nis a BSS symbol.\n\nFixes #77301\n\nChange-Id: I15b9af4513a5eb0e8955014a12073c2b56bcefab\nReviewed-on: https://go-review.googlesource.com/c/go/+/739080\n\n[…]\nnt.com>\nReviewed-by: David Chase <drchase@google.com>\nReviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>\nReviewed-by: Carlos Amedee <carlos@golang.org>\nAuto-Submit: Ian Lance Taylor <iant@golang.org>",
          "is_bot": false,
          "headline": "cmd/internal/objfile: use 'B' code for ELF and PE BSS symbols",
          "author_name": "Ian Lance Taylor",
          "author_login": "ianlancetaylor",
          "committed_at": "2026-06-25T16:09:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48bf92284cb3923db5190e2de5bc85282e68b76b",
          "body": "…nd constants\n\nCurrently, an out-of-bound constant index of GetElem or SetElem\ncan generate code that is failed to verify with the Wasm engine.\nFix it by handling out-of-bound constant the same way as dynamic\nvalues.\n\nMake GetElem/SetElem tests portable.\n\nChange-Id: I0e36b48c2b020a24286c257ee2c778b0041993e3\nReviewed-on: https://go-review.googlesource.com/c/go/+/794122\nReviewed-by: David Chase <drchase@google.com>\nTryBot-Bypass: Cherry Mui <cherryyz@google.com>",
          "is_bot": false,
          "headline": "cmd/compile, simd/archsimd: make Wasm Get/SetElem work for out-of-bou…",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-25T14:53:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f0fb7add0e5af727be0e6ab83284f5185ee42b6",
          "body": "arm64_*_test.go is not the right naming convention. It should be\n*_arm64_test.go.\n\nChange-Id: I71b798e6b82c236483354a6de85561b2e244c99a\nReviewed-on: https://go-review.googlesource.com/c/go/+/794089\nReviewed-by: David Chase <drchase@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd/archsimd: rename arm64 test files",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-25T14:52:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b350da230f3d2d955159266c58d60fa68323f44c",
          "body": "Slightly rewrite some tests to make them portable.\n\nMove AMD64-specific ones to simd_amd64_test.go.\n\nChange-Id: Ib82f4806e1ae258f4201b98a8eaa15eecb67c71b\nReviewed-on: https://go-review.googlesource.com/c/go/+/794084\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: David Chase <drchase@google.com>",
          "is_bot": false,
          "headline": "simd/archsimd: deduplicate simd_test.go and arm64_simd_test.go",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-25T14:51:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e233bce82f655b899796589baf6f3dcaa6792f1f",
          "body": "Change-Id: Ica79417b43af8004dc15e4f1e114640b954247af\nReviewed-on: https://go-review.googlesource.com/c/go/+/794000\nReviewed-by: David Chase <drchase@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd/archsimd: deduplicate ternary test helpers",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-25T14:51:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "649897800b5114739fe83e0e053d363167441ffc",
          "body": "On sbrk platforms (Plan 9 and Wasm), sysReserveOS\nreturns nil when it can't reserve memory at the\nrequested hint address. When the caller passes that\nnil result to sysUnreserve, sysFreeOS reaches\nmemFree(nil), which clears the region with\nmemclrNoHeapPointers, writing to address 0.\n\nOn Plan 9, this \n[…]\nom>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Richard Miller <millerresearch@gmail.com>",
          "is_bot": false,
          "headline": "runtime: handle nil pointer in sysFreeOS on sbrk platforms",
          "author_name": "David du Colombier",
          "author_login": "0intro",
          "committed_at": "2026-06-24T23:20:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "104f868a023b7cf9ae1871a3ef7bd1d194f760be",
          "body": "For Windows c-shared builds, peCreateExportFile writes a .def file\ncontaining a LIBRARY directive. When the output name has a trailing dot,\nas can happen for c-shared builds without an explicit -o, the directive\nwas emitted as:\n\n\tLIBRARY mypackage.\n\nSome GNU ld versions reject that as invalid .def s\n[…]\n.com>\nReviewed-by: Alex Brainman <alex.brainman@gmail.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd/link: quote PE .def library name",
          "author_name": "qmuntal",
          "author_login": "qmuntal",
          "committed_at": "2026-06-24T22:18:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29c1c946aa2fc8303f534ba85f534ae05cef6c2f",
          "body": "Measuring contention on runtime-internal mutex values involves some\nunlock2 calls acquiring the leaf-like profInsert mutex. It's not safe to\ndo that when the M holds other mutex locks, and also not safe when the M\nis running a G with the Gscan bit set. CL 571056 codified the\ninteraction between gsca\n[…]\n@gmail.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Pratt <mpratt@google.com>",
          "is_bot": false,
          "headline": "runtime: deconflict gscan and mutex profiler",
          "author_name": "Rhys Hiltner",
          "author_login": "rhysh",
          "committed_at": "2026-06-24T21:39:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cdf96936c0018ec224216bc79cc3ef8e6db71d88",
          "body": "Change-Id: I529a7bb7ff6ee13d57b168cd657ff223fd98eb9b\nReviewed-on: https://go-review.googlesource.com/c/go/+/793480\nReviewed-by: David Chase <drchase@google.com>\nReviewed-by: Junyang Shao <shaojunyang@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd/archsimd: deduplicate conversion test helpers",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-24T19:21:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d0822bdcb0537209da6a9211c9f83532f4fae36",
          "body": "A missing synctest.Wait in TestConnPartialWrite seems to cause a test\nflake: in rare cases, the reader goroutine might call Close before the\nwriter is able to write the final buffered byte.\n\nFixes #79508\n\nChange-Id: Ia57eddf94c1a826525657c8ec6f3e9f26a6a6964\nReviewed-on: https://go-review.googlesourc\n[…]\ngoogle.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Nicholas Husin <husin@google.com>",
          "is_bot": false,
          "headline": "internal/nettest: fix flake in TestConnPartialWrite",
          "author_name": "Nicholas S. Husin",
          "author_login": "nicholashusin",
          "committed_at": "2026-06-24T14:53:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c996ed1abc7370d961ad60ea06e61fe466ca66a6",
          "body": "ShiftAll operations are supported on all platforms. Test them in\nportable files. Remove the redundant ShiftConst tests, as they are\nessentually the same as ShiftAll tests.\n\nAdd more ShiftAll tests for AMD64.\n\nChange-Id: Ic1059341670019c31cc325641ede51b405e9636a\nReviewed-on: https://go-review.googles\n[…]\n/go/+/793364\nReviewed-by: David Chase <drchase@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd/archsimd: deduplicate shift tests",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-24T03:49:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a2b3c73f7534ad35dfa947bc1b748f8d943c190e",
          "body": "ARM64's IfElse behavior is reversed from other platforms. Reverse\nit. Internally, its bitSelect is also the reverse of Wasm's\nBitSelect. Reverse the ARM64 one to match.\n\nMake Masked and IfElse tests portable.\n\nChange-Id: Icd2dbcb3383b2be642fd6fc7115ef1cbef0f9b78\nReviewed-on: https://go-review.google\n[…]\n/go/+/793361\nReviewed-by: David Chase <drchase@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd/archsimd: correct ARM64 IfElse semantics",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-24T03:49:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a4fbc3f244e575342c48907fbd17faf3333631c",
          "body": "CL 736020 replaced calls to mapaccess1 with mapaccess2*. The main\npurpose is reducing the code duplication in runtime, since they are\nshared the same implementation.\n\nHowever, inside the compiler, OINDEXMAP is used in expression context.\nThus it's not safe to replace the mapaccess1 by mapaccess2 cal\n[…]\nroject-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Cuong Manh Le <cuong.manhle.vn@gmail.com>\nReviewed-by: Keith Randall <khr@google.com>",
          "is_bot": false,
          "headline": "cmd/compile: fix invalid code generation for OINDEXMAP",
          "author_name": "Cuong Manh Le",
          "author_login": "cuonglm",
          "committed_at": "2026-06-23T20:20:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9c9e880fe150c27e742bfabe9c145feef7e5928f",
          "body": "DWARF generation's createConservativeVar asserts that every variable\nmarked ir.EscHeap has a non-nil Heapaddr. This assumption only holds for\nreachable declarations.\n\nEscape analysis runs before SSA generation and is not reachability-aware,\nso it can mark a variable declared in dead code as heap-esc\n[…]\n.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Keith Randall <khr@google.com>\nReviewed-by: Keith Randall <khr@golang.org>",
          "is_bot": false,
          "headline": "cmd/compile: don't require Heapaddr for heap vars in dead code",
          "author_name": "Derek Parker",
          "author_login": "derekparker",
          "committed_at": "2026-06-23T20:07:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c433e4242e764544fe8e9ad4c5127a88f1f460a4",
          "body": "This commit updates the allowedUnexpectedVerifications and\nallowedUnexpectedFailures maps with justification/TODOs for the various\ntest cases in x509-limbo where our produced behaviour doesn't match\nexpected. In many cases these are deliberate choices, but in some others\nwe may want to revisit the i\n[…]\ntps://go-review.googlesource.com/c/go/+/783980\nReviewed-by: David Chase <drchase@google.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>\nTryBot-Bypass: Daniel McCarney <daniel@binaryparadox.net>",
          "is_bot": false,
          "headline": "crypto/x509: triage x509limbo allows",
          "author_name": "Daniel McCarney",
          "author_login": "cpu",
          "committed_at": "2026-06-23T19:54:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "431520e3bcd5be1ad36d7760aeb0f62364bef6ab",
          "body": "Augment existing test coverage by adding a harness for C2SP/x509-limbo.\nThis test suite is quite extensive, and it also subsumes the entirety of\nthe Netflix BetterTLS suite, allowing us to delete that harness.\n\nx509-limbo publishes a JSON schema describing the test data. Similar to\nWycheproof, to av\n[…]\n: Filippo Valsorda <filippo@golang.org>\nAuto-Submit: Daniel McCarney <daniel@binaryparadox.net>\nTryBot-Bypass: Daniel McCarney <daniel@binaryparadox.net>\nReviewed-by: Neal Patel <nealpatel@google.com>",
          "is_bot": false,
          "headline": "crypto/internal/cryptotest: x509-limbo test coverage",
          "author_name": "Daniel McCarney",
          "author_login": "cpu",
          "committed_at": "2026-06-23T19:46:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "674ceb7c7b92e91f3f55df8929ee242cae6b89e1",
          "body": "During conversion checking, assignableTo probes pointer-to-interface\ntargets to produce a helpful diagnostic. Because type parameters have\ninterface underlying types, that probe also matches targets such as *P\nwhere P is a type parameter.\n\nUse interfacePtrError when Checker.implements formats this d\n[…]\nle.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Mark Freeman <markfreeman@google.com>",
          "is_bot": false,
          "headline": "types2, go/types: fix conversion error for pointer to type param",
          "author_name": "dorbmon",
          "author_login": "Dorbmon",
          "committed_at": "2026-06-23T19:42:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c554c53ac8df4e3128d592489faa13149b69a324",
          "body": "Put tests that can run on all supported architectures (AMD64,\nARM64, and Wasm) in common files. Only use architecture-specific\nfiles for architecture-specific operations.\n\nChange-Id: I7be5dd6afd1f3186fb3fff3dc2817024b67c6fa9\nReviewed-on: https://go-review.googlesource.com/c/go/+/792161\nReviewed-by: Junyang Shao <shaojunyang@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd/archsimd: deduplicate tests",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-23T18:20:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f457b96a976b6b99bc2de6297009fe5d1593df5",
          "body": "FetchModule runs \"go mod download -json\" and unmarshals the result.\nThe JSON contract is on stdout, but the go command can also print\nnon-fatal diagnostics to stderr.\n\nOn Windows builders, a module cache write warning such as\n\n    go: writing go.mod cache: rename ... Access is denied.\n\ncan be printe\n[…]\n@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Daniel McCarney <daniel@binaryparadox.net>",
          "is_bot": false,
          "headline": "crypto/internal/cryptotest: parse go mod download JSON from stdout",
          "author_name": "qmuntal",
          "author_login": "qmuntal",
          "committed_at": "2026-06-23T16:00:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57f9a589b5dfd9635879e85cd1c2937441368989",
          "body": "Currently, when performing path sanitization and trailing-slash\nredirects, we do not populate the RawPath field of the returned URL. As\na result, when a URL path is already escaped, our redirect behavior can\nbe rather surprising:\n\n- When \"/a//b%2fc\" is sanitized, it is double-escaped, becoming\n  \"/a\n[…]\nd@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>\nReviewed-by: Nicholas Husin <husin@google.com>",
          "is_bot": false,
          "headline": "net/http: preserve path escaping in redirects",
          "author_name": "Nicholas S. Husin",
          "author_login": "nicholashusin",
          "committed_at": "2026-06-23T00:19:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "40f0f8125549b511e41607712acb0435ce07d060",
          "body": "…f fields\n\nWhen MatchCaseInsensitiveNames is specified, an incoming JSON name\nmay match multiple Go struct fields to prospectively unmarshal into.\nThe v1 default behavior is to select the first field declared.\nThis change makes it such that the v2 default is to report an error\nif multiple candidate \n[…]\ngoogle.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Pratt <mpratt@google.com>",
          "is_bot": false,
          "headline": "encoding/json/v2: report error when unmarshaling into ambiguous set o…",
          "author_name": "Joe Tsai",
          "author_login": "dsnet",
          "committed_at": "2026-06-22T21:10:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5e685ce958a29bccbe109354aaae0f67bc38b490",
          "body": "This improves the documentation of:\n* Unmarshal regarding handling of non-addressable values.\n* GetOption regarding the return value when presence is false.\n* MarshalFunc regarding ownership of the returned []byte.\n* MatchCaseInsensitiveNames regarding how this might affect marshaling.\n\nUpdates #797\n[…]\ne.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "encoding/json/v2: improve documentation",
          "author_name": "Joe Tsai",
          "author_login": "dsnet",
          "committed_at": "2026-06-22T20:38:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e296659b1222b1813bff7f310478ee3ac042902e",
          "body": "During inlining of instantiations of imported generic functions,\nthe compiler reads the generic function body which can trigger\nCanInlineFuncs on newly instantiated functions. Currently, on\nthis code path CanInlineFuncs is called with a nil profile, even\nif PGO is enabled, which causes some inconsis\n[…]\ngo/+/793042\nReviewed-by: Michael Pratt <mpratt@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd/compile: plumb PGO profile through inliner and body reader",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-22T20:31:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "61796ad8aff97c1b9076149e4eda954c790dcbbf",
          "body": "Matches os.Symlink behavior. Windows accepts forward and backward slash\nas interchangeable in most contexts, but not in symlink targets.\n\nFixes #80073\n\nChange-Id: I62fdf301c7a2e713faaa5fbe4654d06e6a6a6964\nReviewed-on: https://go-review.googlesource.com/c/go/+/793020\nReviewed-by: Quim Muntal <quimmun\n[…]\ne.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "os: remap / to \\ in Windows os.Root.Symlink targets",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2026-06-22T19:46:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6427ef53e4d2a2b8e19b4bb85c6ea166b7e855e",
          "body": "Conn.ConnectionState reports details that are only populated once the\nTLS handshake has completed. Callers that read it immediately after\nAccept (for example via tls.NewListener) instead observe an\nunpopulated ConnectionState whose HandshakeComplete field is false.\n\nDocument this precondition on Con\n[…]\nluci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "crypto/tls: document that ConnectionState is valid only after handshake",
          "author_name": "harjoth",
          "author_login": "harjothkhara",
          "committed_at": "2026-06-22T16:29:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97b2becb4e70a53df1816a9ed350f33c612a43a3",
          "body": "The comment was correct when written but became obsolete\nwhen the mu field changed to a pointer to a Mutex.\nThe code is clear in any case.\n\nChange-Id: Ibef2c2c4df07050e73e92bd14fabccdd3b48b0da\nReviewed-on: https://go-review.googlesource.com/c/go/+/789400\nLUCI-TryBot-Result: golang-scoped@luci-projec\n[…]\noped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>\nAuto-Submit: Ian Lance Taylor <iant@golang.org>",
          "is_bot": false,
          "headline": "log/slog: remove obsolete comment",
          "author_name": "Ian Lance Taylor",
          "author_login": "ianlancetaylor",
          "committed_at": "2026-06-22T16:11:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9d758c06efe9ce67fb1299d8a5b85aa47e5baa1a",
          "body": "The Go specification uses the term \"rune literal\" (not \"character\nliteral\") for single-quoted literals like 'a'. The %q verb\ndocumentation in the fmt package uses the outdated term \"character\nliteral\". This change updates it to use the correct Go terminology.\n\nAs noted by @adonovan in #78486, %q wor\n[…]\nolang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Alan Donovan <adonovan@google.com>",
          "is_bot": false,
          "headline": "fmt: fix %q verb documentation to say \"rune literal\"",
          "author_name": "tengtian",
          "author_login": "Herrtian",
          "committed_at": "2026-06-22T15:05:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd6f414c65e61a51cf12c98ef473957d73f97c44",
          "body": "TestCtrlBreak relied on a fixed sleep to wait for a testing child\nprogram to be ready to receive the signal. This may cause flaky timeouts\non slow machines. Instead, wait for the child to print a \"ready\" message\nlike other signal tests, particularly runtime.TestLibraryCtrlHandler.\n\nAlso fix a typo i\n[…]\ned-by: Alex Brainman <alex.brainman@gmail.com>\nReviewed-by: Hongxiang Jiang <hxjiang@golang.org>\nAuto-Submit: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "os/signal: avoid flaky TestCtrlBreak by waiting for child stdout",
          "author_name": "Davis Goodin",
          "author_login": "dagood",
          "committed_at": "2026-06-19T17:19:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a2fd613c3e3c1b1441047372230169f41419b773",
          "body": "…bnormal\n\nWhen fadd64/fsub64 cancel two near-equal, opposite-sign normal operands\ninto a subnormal result, fpack64 is handed a mantissa far below\n1<<mantbits64 while exp is still a normal-range exponent. fpack64 saved\nmant0/exp0/trunc0 before its normalization loop, so the denormal branch\nrestored a\n[…]\nhr@golang.org>\nAuto-Submit: Keith Randall <khr@golang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "runtime: fix softfloat64 add/sub for normal operands cancelling to su…",
          "author_name": "Omar Sy",
          "author_login": "omarsy",
          "committed_at": "2026-06-19T17:13:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d1bcd100967062e45b4f0df2daebcf6df7a02d4",
          "body": "The TestIFace, TestSizeof, TestCompileOk and\nTestCompileError tests run \"go test\" as a subprocess\nto build the testdata packages that import simd, which\nonly builds with GOEXPERIMENT=simd.\n\nThe subprocess is expected to inherit the experiment\nfrom the environment. However, on Plan 9, it is not\ninher\n[…]\n@google.com>\nAuto-Submit: David Chase <drchase@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd: set GOEXPERIMENT in testdata tests",
          "author_name": "David du Colombier",
          "author_login": "0intro",
          "committed_at": "2026-06-18T19:05:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "642abeced65e11b9040381fc0adfe46f73762915",
          "body": "added a complete test of the bug that was fixed.\n\nChange-Id: I733e928c78d3ffa3236d569e0634f928b97d4586\nReviewed-on: https://go-review.googlesource.com/c/go/+/792101\nAuto-Submit: David Chase <drchase@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Junyang Shao <shaojunyang@google.com>",
          "is_bot": false,
          "headline": "simd: repair missed StorePart-returns-int in generated code",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-18T18:28:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86f1f775f3c26cde2a88aa5cba34b5a784e2b965",
          "body": "It is possible for a Float.Text result to not match the\nstrconv.FormatFloat result for corresponding arguments\nif the float32/64 argument is denormalized.\n\nComment change only.\n\nFor #71245.\n\nChange-Id: I153d4074388d4a5c87d3bf0b202a8ca77d13ffb1\nReviewed-on: https://go-review.googlesource.com/c/go/+/7\n[…]\ngle.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "math/big: Float.Text result may not match strconv.FormatFloat result",
          "author_name": "Robert Griesemer",
          "author_login": "griesemer",
          "committed_at": "2026-06-18T16:00:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cabdf7fdd04d48d283de41e93dcb36d0da21fb10",
          "body": "When writing an HTTP/1 request or response, trailer names were copied\nverbatim onto the \"Trailer:\" declaration line by writeHeader. The only\nprior filtering was a switch rejecting the three reserved keys, and\nCanonicalHeaderKey returns a key containing invalid bytes unchanged, so a\ntrailer name such\n[…]\noped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Nicholas Husin <nsh@golang.org>\nReviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>",
          "is_bot": false,
          "headline": "net/http: validate trailers when writing requests and responses",
          "author_name": "harjoth",
          "author_login": "harjothkhara",
          "committed_at": "2026-06-18T15:31:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac2b8fc093d50e027914d3bc2cde963172a62895",
          "body": "Since last time the default.pgo profile is collected, there has\nbeen a lot of development in the compiler. It's time to refresh\nthe compiler's PGO profile.\n\nProfile collected by running the cmd/compile/profile.sh script on\nthe gotip-linux-amd64_c2s16-perf_vs_release gomote.\n\nThere is a slight improv\n[…]\noped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: David Chase <drchase@google.com>\nSLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com>",
          "is_bot": false,
          "headline": "cmd/compile: update default PGO profile",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2026-06-18T15:05:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "15929d1085b0e4395e8c1951a7da125f00009d91",
          "body": "Fix \"nor\" to \"not\" in genericExprList comment in\nsrc/cmd/compile/internal/types2/call.go.\n\nChange-Id: Ibf4f363e3191a8196c08bfdaa500f0d5ef6a4285\nGitHub-Last-Rev: 5f11da9ad414db813ee46894d9d5087266408f4f\nGitHub-Pull-Request: golang/go#77668\nReviewed-on: https://go-review.googlesource.com/c/go/+/746500\n[…]\nhr@golang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Keith Randall <khr@golang.org>",
          "is_bot": false,
          "headline": "cmd/compile: fix typo in comment",
          "author_name": "goto1134",
          "author_login": "goto1134",
          "committed_at": "2026-06-18T13:38:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "96bc97f6a339753adcb8548b3becaebbfbe51ab4",
          "body": "While functions are not valid map keys, we can still infer the intended\ntype arguments. Avoid reporting a follow-on \"cannot use generic function\nwithout instantiation\" error.\n\nThis will be more relevant when implementing #12854, since we will want\nto have such type inference work for untyped composi\n[…]\ngo/+/791946\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Robert Griesemer <gri@google.com>",
          "is_bot": false,
          "headline": "go/types, types2: permit function type argument inference for map keys",
          "author_name": "Mark Freeman",
          "author_login": "mrkfrmn",
          "committed_at": "2026-06-17T21:28:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8931a196a1ea28c9d37a8ac1e1c5593d69465a65",
          "body": "Fixes #74451\n\nChange-Id: I61e6339199c32ee160a8a4b55ddd668b6a6a6964\nReviewed-on: https://go-review.googlesource.com/c/go/+/778621\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Matloob <matloob@golang.org>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Michael Matloob <matloob@google.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "cmd/go: link and clarify docs for GOCACHEPROG",
          "author_name": "Sean Liao",
          "author_login": "seankhliao",
          "committed_at": "2026-06-17T21:19:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c83d55f69519f8cc633215287142f394d3b66087",
          "body": "Change-Id: I1be3789641bf06c1a9bc9aca1667b880b6bdb259\nReviewed-on: https://go-review.googlesource.com/c/go/+/791820\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nAuto-Submit: David Chase <drchase@google.com>",
          "is_bot": false,
          "headline": "simd: add doc.go",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-17T20:55:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc1ee09473066dbe28431a059852ddc031ad40a8",
          "body": "…methods\n\nalso, fields.  Don't rename fields, if they are dependent they are embedded\nwithin a dependent type.\n\nalso-also, don't rename local variables.  It is not necessary, and might\ncause downstream problems, e.g., when debugging.\n\nadded/reorganized tests\n\nput locations on debugging output\n\nenhan\n[…]\n@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: David Chase <drchase@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>",
          "is_bot": false,
          "headline": "cmd/compile: rename types with dependent methods instead of renaming …",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-17T20:55:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f22ebe8b6a76758ef17f8829c880bf0799de431d",
          "body": "Change-Id: Idfd6a2f4f146f84c0eaaf3ad27494937aaeb12ca\nReviewed-on: https://go-review.googlesource.com/c/go/+/791680\nReviewed-by: Cherry Mui <cherryyz@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd: repair doc comment for Store, StorePart",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-17T19:21:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a1dd03423311e92d0ec4f1b4eedae2c9d2b6e96",
          "body": "The `inline` tag option is already used in existing Go code\nfor purposes outside of what the \"encoding/json\" has provided.\nAdding support for it now unfortunately changes the semantics,\nwhich may existing code.\n\nInstead of the `inline` tag option, rename it as `embed`.\nThis better matches the Go lan\n[…]\nrst@gmail.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "encoding/json/v2: rename `inline` tag option as `embed`",
          "author_name": "Joe Tsai",
          "author_login": "dsnet",
          "committed_at": "2026-06-17T19:10:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "22fbb9e5bb10ff1d1921fe884841abac8a1e0031",
          "body": "Fixes build failure introduced by CL 791540.\n\nFor #63813.\n\nChange-Id: I7808e7c5b5fe694439f921a0d90fbaa994298229\nReviewed-on: https://go-review.googlesource.com/c/go/+/791700\nTryBot-Bypass: Robert Griesemer <gri@google.com>\nAuto-Submit: Robert Griesemer <gri@google.com>\nReviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>\nReviewed-by: Robert Griesemer <gri@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>",
          "is_bot": false,
          "headline": "cmd/go: adjust test script (fix build)",
          "author_name": "Robert Griesemer",
          "author_login": "griesemer",
          "committed_at": "2026-06-17T18:37:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9052a2962d0d6854cca58ee0d45f81fda5357b3d",
          "body": "ConnectionState.LocalCertificate is documented to be populated only for\nconnections which are not resumed. However, the TLS 1.0-1.2 server\nhandshake set it in processClientHello, which runs before\ncheckForResumption, and nothing cleared it on the abbreviated handshake\npath. Resumed pre-1.3 server co\n[…]\ngle.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "crypto/tls: only set LocalCertificate when a certificate is presented",
          "author_name": "waris )",
          "author_login": "sin99xx",
          "committed_at": "2026-06-17T17:11:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "beed654b97d1fe530df2e7de764079ba4dd5dcc2",
          "body": "When gfortran is installed on Windows, there is no unversioned\nlibgfortran library - look for libgfortran.a instead.\n\nThis fixes a test failure introduced in CL 787800, which has not been\ncatched by the trybots because they don't have gfortran installed.\n\nChange-Id: I8b8b87af4ca66c090691d950dc1b778c\n[…]\ne.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@golang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd/cgo: fix TestFortran on Windows",
          "author_name": "qmuntal",
          "author_login": "qmuntal",
          "committed_at": "2026-06-17T14:53:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "26d16b710ef03876159e9e321ba1b7a840aa0114",
          "body": "… tests via a longer WaitDelay\n\nIssue #76685 has many watchflakes reports that include the error\n\"WaitDelay expired before I/O complete\", with the testscripts\nin cmd/link contributing the highest volume there. #70356 also has\naccumulated 40 or so similar \"WaitDelay expired\" watchflakes reports\nfor t\n[…]\nect-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Michael Matloob <matloob@golang.org>",
          "is_bot": false,
          "headline": "cmd/internal/script/scripttest: deflake cmd/link and other testscript…",
          "author_name": "thepudds",
          "author_login": "thepudds",
          "committed_at": "2026-06-17T14:25:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "16e8e067516c7c35f2affd8e9d58271707611575",
          "body": "…irm as runtime.Error\n\nThis change adds \"runtime error:\" to runtime.PanicNilError's Error method\nto uniquely distinguish from other errors and to correctly conform to runtime.Error.\n\n10 years ago in CL 21214, I added runtime.plainError to help correctly conform\nruntime panics to the Go specification\n[…]\nolang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Keith Randall <khr@google.com>\nCommit-Queue: Emmanuel Odeke <emmanuel@orijtech.com>\nReviewed-by: Keith Randall <khr@golang.org>",
          "is_bot": false,
          "headline": "runtime: prefix \"runtime error:\" to PanicNilError.Error to fully conf…",
          "author_name": "Emmanuel T Odeke",
          "author_login": "odeke-em",
          "committed_at": "2026-06-17T14:17:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d1cdacd7861acbfa5ff376ce8c0c4653902c86c",
          "body": "For historical reasons, the http2 tests use a helper function to\ncall synctest.Test. (The tests predate the synctest package,\nand this function used to have two implementations.)\n\nDrop the synctestTest helper and just call synctest.Test.\nRewrite a lot of test functions to take a *testing.T instead\no\n[…]\nd@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Damien Neil <dneil@google.com>\nReviewed-by: Nicholas Husin <husin@google.com>",
          "is_bot": false,
          "headline": "net/http/internal/http2: call synctest.Test directly",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2026-06-17T04:21:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b6a3601c13aa10c40ee8b4e655782f7a8b4f1371",
          "body": "A SETTINGS frame can adjust the initial flow control limits of streams.\nValidate server-sent SETTINGS frames to ensure the changed initial limit\nhasn't caused any currently-open streams to violate their limits.\n\nMinor related cleanups: Dropped a redundant check for the maximum value\nof SettingInitia\n[…]\nom <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Nicholas Husin <husin@google.com>\nAuto-Submit: Damien Neil <dneil@google.com>\nReviewed-by: Nicholas Husin <nsh@golang.org>",
          "is_bot": false,
          "headline": "net/http/internal/http2: verify SETTINGS from server against flow limits",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2026-06-17T04:21:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "efddb5ac611b930a4d44f947ab53d37d3e5ab525",
          "body": "Based on CL 784220 but adjusted to fit latest source status.\n\nReplace opaque assert() calls in the exported Instantiate function with\nexplicit panics that spell out the violated precondition.\n\nInternal assertions in instance() are unchanged since they guard invariants\nunreachable from the public API\n[…]\ngoogle.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Robert Griesemer <gri@google.com>",
          "is_bot": false,
          "headline": "go/types, types2: add user-friendly panics in Instantiate",
          "author_name": "Robert Griesemer",
          "author_login": "griesemer",
          "committed_at": "2026-06-16T17:32:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b4771dc03289ec1d038f550063acb6d6a3e54b49",
          "body": "The WriteRune methods return the length in bytes of the UTF-8 encoding\nof the rune. This clarifies the documentation by making the unit of the\nreturned length explicit.\n\nChange-Id: I4b83e614c62391b064d6e8a1a540d124ccf59967\nReviewed-on: https://go-review.googlesource.com/c/go/+/790401\nLUCI-TryBot-Res\n[…]\nle.com>\nReviewed-by: Alan Donovan <adonovan@google.com>\nCommit-Queue: Robert Griesemer <gri@google.com>\nReviewed-by: Robert Griesemer <gri@google.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "bytes, strings: clarify WriteRune return values",
          "author_name": "cuishuang",
          "author_login": "cuishuang",
          "committed_at": "2026-06-16T16:03:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a15699a43a4a5f1fa1b7ec2282268c6b14c689d",
          "body": "…ement size\n\nThe allocator doesn't accept total sizes that are not a multiple\nof the element size.\n\nFixes #80004\n\nChange-Id: I177d67c1ecc15ec9d09b160bbcc2bfb7a3a1891f\nReviewed-on: https://go-review.googlesource.com/c/go/+/790600\nReviewed-by: Cuong Manh Le <cuong.manhle.vn@gmail.com>\nReviewed-by: Kei\n[…]\ne.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "runtime: in moveSliceNoCap, round size down to a whole multiple of el…",
          "author_name": "khr@golang.org",
          "author_login": "randall77",
          "committed_at": "2026-06-16T14:45:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "679b34ec948a9c2fc1173f86f9b3fe5bbbfcea96",
          "body": "Re-run all go:generate stringer commands. This changes indexing to use\nint in order to avoid overflows or out-of-bounds access, see\ngolang/go#75602.\n\nChange-Id: I8e16c4dd45bdd68acbc45139905615f60d2fba0a\nReviewed-on: https://go-review.googlesource.com/c/go/+/786020\nAuto-Submit: Tobias Klauser <tobias\n[…]\ne.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "all: re-run stringer",
          "author_name": "Tobias Klauser",
          "author_login": "tklauser",
          "committed_at": "2026-06-15T23:41:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0ed83956d30747aaddce636adc87bcd04e2c9cd1",
          "body": "Use the same, more concise, error message when reporting an invalid\nuse of a removed GODEBUG setting; both a build time and at init time.\nThis change only changes error messages and adjusts tests.\n\nFor #76163.\nFollow-up on CL784221, CL788340.\n\nChange-Id: I7101cf316a67c6f7b03cb06d82c0bed6886c77b3\nRev\n[…]\ng-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Robert Griesemer <gri@google.com>\nReviewed-by: Mark Freeman <markfreeman@google.com>\nReviewed-by: Robert Griesemer <gri@google.com>",
          "is_bot": false,
          "headline": "cmd/go: harmonize error messages for invalid GODEBUG settings",
          "author_name": "Robert Griesemer",
          "author_login": "griesemer",
          "committed_at": "2026-06-15T21:15:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5fcab936f9991e8fe8380d8cc19ea8c86248460",
          "body": "draft-ietf-tls-esni has become RFC 9849, and the ECHConfigList structure\nis unchanged.\n\nChange-Id: Iccf05dc60206716e7d8062145955378f3df6b8e6\nReviewed-on: https://go-review.googlesource.com/c/go/+/790302\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Daniel McCarney <daniel@binarypa\n[…]\ndox.net>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "crypto/tls: update ECH specification reference",
          "author_name": "Daniel McCarney",
          "author_login": "cpu",
          "committed_at": "2026-06-15T18:13:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f4a0968b27c651040677ad6d89978ff0346aea7",
          "body": "Both ec.raw and the assigned enc are []byte and don't require an\nexplicit conversion.\n\nChange-Id: I2f0e7c161b653269ee450fefe5a49fc9e9e42fd2\nReviewed-on: https://go-review.googlesource.com/c/go/+/790301\nAuto-Submit: Daniel McCarney <daniel@binaryparadox.net>\nReviewed-by: Roland Shoemaker <roland@gola\n[…]\ng.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "crypto/tls: skip unnecessary type conversion",
          "author_name": "Daniel McCarney",
          "author_login": "cpu",
          "committed_at": "2026-06-15T18:12:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c086c0e53b54ba0cc9d3fd00423a23c44cfe23fa",
          "body": "notice the difficulty of accommodating uncertain\nvector widths for fixed-size examples.\n\nChange-Id: I7d83e6d19d6d802b61e6e4c8ab9e139fda9d7072\nReviewed-on: https://go-review.googlesource.com/c/go/+/790240\nReviewed-by: Cherry Mui <cherryyz@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "simd: add example_test.go",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-15T17:26:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0607ffa8e9bd17e112e13238ad309985f3ca3b9b",
          "body": "On darwin, rawSyscall, rawSyscall6, and rawSyscall9 are Go\nfunctions (not assembly as on Linux) that get race-detector\ninstrumentation. When forkAndExecInChild calls rawSyscall in\nthe forked child process, the TSan ThreadState pointer is\ninvalid, causing SIGSEGV in TraceSwitchPartImpl.\n\nAdd //go:nor\n[…]\nd@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Quim Muntal <quimmuntal@gmail.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@golang.org>",
          "is_bot": false,
          "headline": "syscall: add //go:norace to rawSyscall on darwin",
          "author_name": "Sebastien Tardif",
          "author_login": "SebTardif",
          "committed_at": "2026-06-15T17:13:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7239eead280fdf78b47a37d7df218d5331155c17",
          "body": "Aliases were initially skipped in this algorithm for simplicity. Through\nsome contrived programming, we can discover values of incomplete aliases.\nThus, we need to account for them.\n\nFixes #79265\n\nChange-Id: I92da84ee0dcc58c2b80ecbbe2f846cd96d23d0d2\nReviewed-on: https://go-review.googlesource.com/c/\n[…]\nle.com>\nAuto-Submit: Mark Freeman <markfreeman@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "go/types, types2: traverse aliases in isComplete check",
          "author_name": "Mark Freeman",
          "author_login": "mrkfrmn",
          "committed_at": "2026-06-15T16:52:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "012d142e780071688dfb651874393818c0aed625",
          "body": "This has to be removed before the Go 1.27 release. We haven't used this\nfor debugging so far, and are thus unlikely to need it between here and\nthe release.\n\nFixes #79750\n\nChange-Id: If08670778e6ab2456a82e73fa9689095bed5ea73\nReviewed-on: https://go-review.googlesource.com/c/go/+/790180\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Robert Griesemer <gri@google.com>",
          "is_bot": false,
          "headline": "internal/goexperiment: delete Flags.GenericMethods",
          "author_name": "Mark Freeman",
          "author_login": "mrkfrmn",
          "committed_at": "2026-06-15T15:21:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38e988efb4b8f5e73e887027f386a342c138b649",
          "body": "…ping\n\nFixes #79873\n\nBased on the following lines of code (483-484):\n  // Special case for floating point - LF/LEF not generated\n  (If (SETGF  cmp) yes no) => (UGT  cmp yes no)\n  (If (SETGEF cmp) yes no) => (UGE  cmp yes no)\n\nI had got it backward.\n\nTheses conditional codes tables mappings are extre\n[…]\nped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Jorropo <jorropo.pgm@gmail.com>\nReviewed-by: Keith Randall <khr@golang.org>",
          "is_bot": false,
          "headline": "cmd/compile: fix AMD64 misscompilation due to AMD64 SETcc and Jcc map…",
          "author_name": "Jorropo",
          "author_login": "Jorropo",
          "committed_at": "2026-06-13T23:51:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "61202f574e9b9eb24990f174685ad2a596a7661d",
          "body": "CL 789060 fixed a case in the backing store analysis\nfor range over slice statements.\n\nThis CL makes a corresponding update to the off-by-default\nGOEXPERIMENT=runtimefreegc codegen tests.\n\nWhile here, we slightly tweak the wording and regexp in the\nequivalent default test code (for when GOEXPERIMENT\n[…]\nnhle.vn@gmail.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nAuto-Submit: t hepudds <thepudds1460@gmail.com>\nReviewed-by: Keith Randall <khr@golang.org>\nReviewed-by: Keith Randall <khr@google.com>",
          "is_bot": false,
          "headline": "test/codegen: update runtimefreegc test for slice backing store fix",
          "author_name": "thepudds",
          "author_login": "thepudds",
          "committed_at": "2026-06-13T23:46:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dfc01c32fedbe4152539a0d77a309a33bd9f722a",
          "body": "This will make it easier to have its value maintained as part of the\nx/build/cmd/updatestd command used to help with the go.dev/issue/36905\ndependency maintenance process.\n\nFor golang/go#36905.\n\nChange-Id: Ifc871bdc4f93656b78b67f2e30aec27a5bd22a29\nReviewed-on: https://go-review.googlesource.com/c/go\n[…]\noject-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Matloob <matloob@golang.org>\nReviewed-by: Michael Matloob <matloob@google.com>",
          "is_bot": false,
          "headline": "cmd/go/internal/doc: move buildPkgsite version constant to package scope",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2026-06-12T23:50:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "13a70de13145e90efba8cfd6403d220c9061cd1c",
          "body": "Also added tests for constant out-of-bounds inputs;\nthat case was missed and is necessary.\n\nTightened up tests to be sure to check both sides of\nthe fencepost, because fencepost errors are a thing.\n\nChange-Id: I812e1a585dd48e71c8ac00daef9a910325770a99\nReviewed-on: https://go-review.googlesource.com/\n[…]\n/go/+/790160\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>",
          "is_bot": false,
          "headline": "simd, cmd/compile: check for out-of-bounds SetElem panic",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-12T20:47:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7624fb3f0a74675c3299baa5016f3486effdce8f",
          "body": "Change-Id: I2cb5f5aada2f40ee950e748c1c441749d80c91e4\nReviewed-on: https://go-review.googlesource.com/c/go/+/788962\nReviewed-by: Cherry Mui <cherryyz@google.com>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd/compile: add debugging flag for simd \"midway\" transformation",
          "author_name": "David Chase",
          "author_login": "dr2chase",
          "committed_at": "2026-06-12T20:47:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff99e412d640dd4287d943cc3ef3a8f40b357179",
          "body": "This change drops the constant timeout from two packages where it's\nbeen observed to be unhelpful. Applying this more widely is left to\nsubsequent changes.\n\nFor #79970.\nFixes #78392.\n\nChange-Id: I2553fc959167acc1af2e55bb4649a724ebd0c5c3\nReviewed-on: https://go-review.googlesource.com/c/go/+/789885\nA\n[…]\nang.org>\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Matloob <matloob@google.com>",
          "is_bot": false,
          "headline": "cmd/dist: drop 3 minute timeout for a few packages that get close",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2026-06-12T20:00:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3ca82d48903bad4fc80317507aa8e86f7263877c",
          "body": "On Windows, volumeNameLen treated \\\\.\\UNC paths specially so the\nUNC host and share remained part of the volume name. However, \\\\?\\UNC\nand \\??\\UNC are also valid device UNC prefixes, and were previously\nhandled by the generic device-prefix case. As a result, the volume\nended at the UNC component ins\n[…]\nang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Alex Brainman <alex.brainman@gmail.com>",
          "is_bot": false,
          "headline": "path/filepath: handle \\\\?\\ and \\??\\ UNC prefixes in VolumeName",
          "author_name": "qmuntal",
          "author_login": "qmuntal",
          "committed_at": "2026-06-12T17:58:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 41,
      "commits_last_year": 3032,
      "latest_release_at": "2026-06-30T07:56:23Z",
      "latest_release_tag": "go1.27.0-gotip.1",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 50,
      "days_since_latest_release": 25,
      "mean_days_between_releases": 2.3
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 1,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-02",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "lib/fips140/Makefile",
        "src/cmd/vendor/golang.org/x/arch/arm/armasm/Makefile",
        "src/cmd/vendor/golang.org/x/arch/s390x/s390xasm/Makefile",
        "src/cmd/vendor/golang.org/x/arch/x86/x86asm/Makefile",
        "src/go/doc/Makefile",
        "src/runtime/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "src/cmd/vendor/golang.org/x/telemetry/tsconfig.json"
      ],
      "toolchain_manifests": [
        "misc/go.mod",
        "src/cmd/compile/internal/ssa/_gen/go.mod",
        "src/cmd/go.mod",
        "src/cmd/objdump/testdata/testfilenum/go.mod",
        "src/cmd/vet/testdata/rangeloop/go.mod",
        "src/cmd/vet/testdata/stdversion/go.mod",
        "src/crypto/internal/cryptotest/wycheproof/_schema/go.mod",
        "src/crypto/internal/cryptotest/x509limbo/_schema/go.mod",
        "src/crypto/internal/fips140/aes/_asm/ctr/go.mod",
        "src/crypto/internal/fips140/aes/_asm/standard/go.mod",
        "src/crypto/internal/fips140/aes/gcm/_asm/gcm/go.mod",
        "src/crypto/internal/fips140/bigmod/_asm/go.mod",
        "src/crypto/internal/fips140/edwards25519/field/_asm/go.mod",
        "src/crypto/internal/fips140/nistec/_asm/go.mod",
        "src/crypto/internal/fips140/sha256/_asm/go.mod",
        "src/crypto/internal/fips140/sha3/_asm/go.mod",
        "src/crypto/internal/fips140/sha512/_asm/go.mod",
        "src/crypto/md5/_asm/go.mod",
        "src/crypto/sha1/_asm/go.mod",
        "src/debug/buildinfo/testdata/go117/go.mod",
        "src/go.mod",
        "src/runtime/_mkmalloc/go.mod",
        "src/simd/archsimd/_gen/go.mod",
        "src/simd/testdata/ip/go.mod"
      ],
      "largest_source_bytes": 3926554,
      "source_files_sampled": 10631,
      "oversized_source_files": 166,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "misc/go.mod",
        "src/go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "golang.org/x/crypto",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.1-0.20260526024921-9beb694f9766"
        },
        {
          "name": "golang.org/x/net",
          "manifest": "src/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.55.1-0.20260526154343-657eb1317b5d"
        },
        {
          "name": "github.com/google/pprof",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260507013755-92041b743c96"
        },
        {
          "name": "golang.org/x/arch",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.27.1-0.20260521044007-9c1a596a2c97"
        },
        {
          "name": "golang.org/x/build",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260522210304-d55d0041b921"
        },
        {
          "name": "golang.org/x/mod",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.1-0.20260520130633-087f6515dd3b"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "golang.org/x/telemetry",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260519152614-eab6ae52b5e2"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        },
        {
          "name": "golang.org/x/tools",
          "manifest": "src/cmd/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.1-0.20260604184323-2111063761b3"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 9,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "rsc",
          "commits": 7568,
          "avatar_url": "https://avatars.githubusercontent.com/u/104030?v=4"
        },
        {
          "type": "User",
          "login": "griesemer",
          "commits": 4591,
          "avatar_url": "https://avatars.githubusercontent.com/u/8528975?v=4"
        },
        {
          "type": "User",
          "login": "robpike",
          "commits": 2993,
          "avatar_url": "https://avatars.githubusercontent.com/u/4324516?v=4"
        },
        {
          "type": "User",
          "login": "ianlancetaylor",
          "commits": 2874,
          "avatar_url": "https://avatars.githubusercontent.com/u/3194333?v=4"
        },
        {
          "type": "User",
          "login": "bradfitz",
          "commits": 2398,
          "avatar_url": "https://avatars.githubusercontent.com/u/2621?v=4"
        },
        {
          "type": "User",
          "login": "randall77",
          "commits": 1826,
          "avatar_url": "https://avatars.githubusercontent.com/u/6889504?v=4"
        },
        {
          "type": "User",
          "login": "aclements",
          "commits": 1820,
          "avatar_url": "https://avatars.githubusercontent.com/u/2688315?v=4"
        },
        {
          "type": "User",
          "login": "cherrymui",
          "commits": 1819,
          "avatar_url": "https://avatars.githubusercontent.com/u/14119929?v=4"
        },
        {
          "type": "User",
          "login": "mdempsky",
          "commits": 1710,
          "avatar_url": "https://avatars.githubusercontent.com/u/38349?v=4"
        },
        {
          "type": "User",
          "login": "josharian",
          "commits": 1506,
          "avatar_url": "https://avatars.githubusercontent.com/u/67496?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.141
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-release.yml",
        "rebase-upstream.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".eslintrc.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 0,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 1,
            "reason": "Found 4/30 approved changesets -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 33 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "28 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6067fdfff89c11725ff00f8608da58a3ba4f94a4",
        "ran_at": "2026-07-26T02:46:19Z",
        "aggregate_score": 2.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T02:28:36Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-05-13T06:25:07Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/justwasm/go4js",
    "host": "github.com",
    "name": "go4js",
    "owner": "justwasm"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 59,
      "inputs": {
        "security": 27,
        "vitality": 89,
        "community": 12,
        "governance": 76,
        "engineering": 72
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 89,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "commits_last_year": 3032,
              "human_commit_share": 0.99,
              "days_since_last_push": 0,
              "active_weeks_last_year": 50
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "50/52 weeks with commits",
                "points": 34.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 50
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "3032 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 3032
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 41,
              "latest_release_tag": "go1.27.0-gotip.1",
              "releases_from_tags": false,
              "days_since_latest_release": 25,
              "mean_days_between_releases": 2.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "41 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 41
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 25 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 25
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-3-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-3-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 76,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "bus_factor": 9,
              "contributors_sampled": 100,
              "top_contributor_share": 0.141
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "9 contributor(s) cover half of all commits",
                "points": 54,
                "status": "met",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 14% of commits",
                "points": 19.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 14
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 33 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 75,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/30 approved changesets -- score normalized to 1",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "justwasm",
              "public_repos": 67,
              "account_age_days": 1424
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of justwasm",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "justwasm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "67 public repos, account ~3 yr old",
                "points": 20.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 67
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 72,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".eslintrc.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "go",
                "wasm",
                "go4js"
              ],
              "has_wiki": true,
              "homepage": "https://justwasm.github.io/go4js/",
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://justwasm.github.io/go4js/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 27,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 27,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 2.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/30 approved changesets -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 33 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "28 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 63,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.909,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "90 of 99 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 90,
                      "sampled": 99
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "lib/fips140/Makefile",
                "src/cmd/vendor/golang.org/x/arch/arm/armasm/Makefile",
                "src/cmd/vendor/golang.org/x/arch/s390x/s390xasm/Makefile",
                "src/cmd/vendor/golang.org/x/arch/x86/x86asm/Makefile",
                "src/go/doc/Makefile",
                "src/runtime/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "src/cmd/vendor/golang.org/x/telemetry/tsconfig.json"
              ],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [
                "misc/go.mod",
                "src/cmd/compile/internal/ssa/_gen/go.mod",
                "src/cmd/go.mod",
                "src/cmd/objdump/testdata/testfilenum/go.mod",
                "src/cmd/vet/testdata/rangeloop/go.mod",
                "src/cmd/vet/testdata/stdversion/go.mod",
                "src/crypto/internal/cryptotest/wycheproof/_schema/go.mod",
                "src/crypto/internal/cryptotest/x509limbo/_schema/go.mod",
                "src/crypto/internal/fips140/aes/_asm/ctr/go.mod",
                "src/crypto/internal/fips140/aes/_asm/standard/go.mod",
                "src/crypto/internal/fips140/aes/gcm/_asm/gcm/go.mod",
                "src/crypto/internal/fips140/bigmod/_asm/go.mod",
                "src/crypto/internal/fips140/edwards25519/field/_asm/go.mod",
                "src/crypto/internal/fips140/nistec/_asm/go.mod",
                "src/crypto/internal/fips140/sha256/_asm/go.mod",
                "src/crypto/internal/fips140/sha3/_asm/go.mod",
                "src/crypto/internal/fips140/sha512/_asm/go.mod",
                "src/crypto/md5/_asm/go.mod",
                "src/crypto/sha1/_asm/go.mod",
                "src/debug/buildinfo/testdata/go117/go.mod",
                "src/go.mod",
                "src/runtime/_mkmalloc/go.mod",
                "src/simd/archsimd/_gen/go.mod",
                "src/simd/testdata/ip/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "lib/fips140/Makefile, src/cmd/vendor/golang.org/x/arch/arm/armasm/Makefile, src/cmd/vendor/golang.org/x/arch/s390x/s390xasm/Makefile, src/cmd/vendor/golang.org/x/arch/x86/x86asm/Makefile, src/go/doc/Makefile, src/runtime/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lib/fips140/Makefile, src/cmd/vendor/golang.org/x/arch/arm/armasm/Makefile, src/cmd/vendor/golang.org/x/arch/s390x/s390xasm/Makefile, src/cmd/vendor/golang.org/x/arch/x86/x86asm/Makefile, src/go/doc/Makefile, src/runtime/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".eslintrc.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "src/cmd/vendor/golang.org/x/telemetry/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "src/cmd/vendor/golang.org/x/telemetry/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 3926554,
              "source_files_sampled": 10631,
              "oversized_source_files": 166
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "166/10631 source files over 60KB",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 10631,
                      "oversized": 166
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T02:46:45.827394Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/justwasm/go4js.svg",
  "full_name": "justwasm/go4js",
  "license_state": "standard",
  "license_spdx": "BSD-3-Clause"
}