公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 08:51 UTC

lightpanda-io / browser

Lightpanda: the headless browser designed for AI and automation

Zig · HTMLAGPL-3.0★ 32,085 星标⑂ 1,430 复刻始于 2023年2月在 GitHub 上查看 ↗

lightpanda-io/browser 的健康指数为 100 分中的 77 分,处于「良好」区间。 其得分最高的类别是Vitality(95/100),最低的是Security(67/100)。 最近一次更新在今天。 近期的大部分工作由 2 位贡献者完成。

77
总分 / 100
良好

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 49(有风险)的上限。AI 就绪度不计入总体分。

77
优秀85-100堪称典范;基本满足所有检验标准
良好70-84健康;仅有轻微不足
中等50-69可接受,但存在明显不足;建议进行审查
存在风险30-49存在重大薄弱环节;采用时应保持审慎
危急1-29问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

361 关注者32 个公开仓库始于 2023年9月

该仓库由组织支持——共同承担、可问责的托管责任,可延续于任何单一维护者之后。

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

95优秀 · 占总体的 22%
评分方式
36/36推送新近度 — 最近一次推送于 0 天前
35.3/36提交节奏 — 52 周中有 51 周有提交
18/18提交量 — 最近一年 5,823 次提交
10/10OpenSSF Scorecard:Maintained — 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year5,823
human_commit_share1
days_since_last_push0
active_weeks_last_year51

发布纪律

90优秀
评分方式
27/27有发布版本 — 已发布 18 个发布版本
36/36发布时效 — 最近一次发布版本于 5 天前
27/27发布节奏 — 约每 13.9 天发布一次
0/10OpenSSF Scorecard:Signed-Releases — Project has not signed or included provenance with any releases.
所用输入
releases_count18
latest_release_tag0.3.5
releases_from_tags
days_since_latest_release5
mean_days_between_releases13.9

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

84良好 · 占总体的 18%
评分方式
60/60星标 — 32,085 个星标
25/25复刻 — 1,430 个复刻
10.7/15关注者 — 84 位关注者
所用输入
forks1,430
stars32,085
watchers84
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

70良好
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(AGPL-3.0)
18/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
has_contributing
has_issue_template
has_code_of_conduct
has_pull_request_template

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

70良好 · 占总体的 24%
评分方式
25.2/54巴士系数 — 2 位贡献者贡献了半数提交
13.5/22.5提交分布 — 头号贡献者编写了 40% 的提交
13.5/13.5贡献者广度 — 56 位贡献者
10/10OpenSSF Scorecard:Contributors — project has 13 contributing companies or organizations
所用输入
bus_factor2
contributors_sampled56
top_contributor_share0.402
评分方式
40/46.8议题解决 — 86% 的议题已关闭
35.3/38.3PR 接受 — 已裁定的 PR 中 2,327/2,523 已合并
9/15OpenSSF Scorecard:Code-Review — Found 9/13 approved changesets -- score normalized to 6
所用输入
merged_prs2,327
open_issues70
closed_issues412
issue_closed_ratio0.855
closed_unmerged_prs196
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
18.4/25所有者影响力 — lightpanda-io 有 361 位关注者
16.7/25既往记录 — 32 个公开仓库,账户约 2 年
所用输入
followers361
owner_typeOrganization
is_verified
owner_loginlightpanda-io
public_repos32
account_age_days1,031

工程质量

基础的工程与文档实践是否到位?

67中等 · 占总体的 20%

工程实践

68中等
评分方式
24/24CI 工作流 — 9 个工作流
24/24存在测试
0/16Linter 配置
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard:CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config

文档

65中等
评分方式
30/30README
0/25文档目录
15/15文档 / 主页站点 — https://lightpanda.io
10/10仓库描述
10/10主题标签 — 8 个主题标签
0/10Wiki
所用输入
topicsbrowser, cdp, headless, playwright, puppeteer, zig, browser-automation, lightpanda
has_wiki
homepagehttps://lightpanda.io
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

67中等 · 占总体的 16%

安全态势

59中等
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — 无数据
2.5/2.5CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
4.5/7.5Code-Review — Found 9/13 approved changesets -- score normalized to 6
2.5/2.5Contributors — project has 13 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — 无数据
3.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
3/5SAST — SAST tool is not run on all commits -- score normalized to 6
4.5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate5.9
已排除计分(无数据或不适用):branch_protection, packaging。 其余权重已重新归一化。
评分方式
35/35直接依赖不含已知公告 — 没有直接依赖携带已知公告
0/25间接依赖不含已知公告 — 在此范围内,传递依赖集合无法与开发和测试依赖区分
0/40没有长期未处理的公告 — 没有公告带有发布日期
所用输入
sourceosv
advisories1
affected_packages1
assessed_packages78
unassessed_packages0
affected_by_severityunknown 1
direct_affected_packages0
已排除计分(无数据或不适用):间接依赖不含已知公告, 没有长期未处理的公告。 其余权重已重新归一化。 已将 78 个已解析依赖与 OSV 比对。 该仓库未发布任何索引可解析的软件包,因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起,因此仅对声明的运行时依赖计分;传递性发现仅作为背景信息列出,不计入评分。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?这是一枚独立的实验性徽章——权重为 0.0,因此单独呈现,不影响总体健康评分。

68中等 · 占总体的 0%
评分方式
45/45代理指令 — AGENTS.md, CLAUDE.md
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 100 次人类提交中有 80 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share0.8
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes1,174
评分方式
18/18一条命令的引导启动 — Makefile
22/22自动化测试
0/11Lint / 格式化配置
0/11静态类型检查
10/10可复现环境 — Dockerfile, Nix, lockfile
4/10已体现的代理实践 — 最近 100 次提交中有 2 次由代理编写或署名代理
0/8自动化维护 — 未观察到自动依赖更新
7/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
所用输入
has_nix
has_tests
lockfilesCargo.lock
has_dockerfile
typed_language
bootstrap_filesMakefile
has_devcontainer
has_linter_config
typecheck_configs
agent_commit_share0.02
toolchain_manifestssrc/html5ever/Cargo.toml
dependency_bot_commit_share0
评分方式
0/45可类型检查的代码 — Zig,未配置类型检查
55/55可控的文件大小 — 采样的 74 个源文件中有 0 个超过 60KB
所用输入
primary_languageZig
largest_source_bytes28,947
source_files_sampled74
oversized_source_files0

关键数据

32,085GitHub 星标
56贡献者
5,823最近 12 个月提交数
0距最近推送天数
18发布版本数
2巴士系数(bus factor)
70开放议题
软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch crates package 'litefetch-html5ever' from its registry

更多细节

Star 与 Fork 历史 0 ★ / 1,430 ⇿
0Star
1,430Fork
10发布

每颗 star 和每个 fork 的添加时间,来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方,二者可相互对照:稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时,它会作为增长真实性予以报告。

仅显示最近的历史——该仓库超出采集窗口,因此未采集最早的历史记录。

5007501,0001,2501,5001,430862026-032026-052026-07
主版本 0次版本 1修订 9
OpenSSF Scorecard 5.9 / 10
5.9综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-23 08:50 UTC

10Binary-Artifactsno binaries found in the repo
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests13 out of 13 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
6Code-ReviewFound 9/13 approved changesets -- score normalized to 6
10Contributorsproject has 13 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
不适用Packagingpackaging workflow not detected
7Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 7
6SASTSAST tool is not run on all commits -- score normalized to 6
9Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
直接依赖 9
注册表软件包版本约束清单文件
crates.iohtml5ever0.39.0src/html5ever/Cargo.toml
crates.iostring_cache0.9.0src/html5ever/Cargo.toml
crates.iotyped-arena2.0.2src/html5ever/Cargo.toml
crates.iotikv-jemallocator0.6.1src/html5ever/Cargo.toml
crates.iotikv-jemalloc-ctl0.6.1src/html5ever/Cargo.toml
crates.ioxml5ever0.39.0src/html5ever/Cargo.toml
crates.ioencoding_rs0.8src/html5ever/Cargo.toml
crates.ioidna1.1.0src/html5ever/Cargo.toml
crates.iourl2.5.8src/html5ever/Cargo.toml
全部依赖 78

来自 GitHub 依赖图的完整解析依赖集合:9 个直接依赖与 69 个间接(传递)软件包。仓库提交锁文件时,传递闭包才是完整的。

注册表软件包版本关系
crates.ioencoding_rs0.8.35直接
crates.iohtml5ever0.39.0直接
crates.ioidna1.1.0直接
crates.iostring_cache0.9.0直接
crates.iotikv-jemalloc-ctl0.6.1直接
crates.iotikv-jemallocator0.6.1直接
crates.iotyped-arena2.0.2直接
crates.iourl2.5.8直接
crates.ioxml5ever0.39.0直接
crates.ioautocfg1.4.0间接
crates.iobitflags2.9.1间接
crates.iocc1.2.39间接
crates.iocfg-if1.0.0间接
crates.iodisplaydoc0.2.6间接
crates.iofastrand2.4.1间接
crates.iofind-msvc-tools0.1.2间接
crates.ioform_urlencoded1.2.2间接
crates.ioicu_collections2.2.0间接
crates.ioicu_locale_core2.2.0间接
crates.ioicu_normalizer2.2.0间接
crates.ioicu_normalizer_data2.2.0间接
crates.ioicu_properties2.2.0间接
crates.ioicu_properties_data2.2.0间接
crates.ioicu_provider2.2.0间接
crates.ioidna_adapter1.2.2间接
crates.iolibc0.2.172间接
crates.iolitemap0.8.2间接
crates.iolock_api0.4.13间接
crates.iolog0.4.27间接
crates.iomarkup5ever0.39.0间接
crates.ionew_debug_unreachable1.0.6间接
crates.ioparking_lot0.12.4间接
crates.ioparking_lot_core0.9.11间接
crates.iopaste1.0.15间接
crates.iopercent-encoding2.3.2间接
crates.iophf0.13.1间接
crates.iophf_codegen0.13.1间接
crates.iophf_generator0.13.1间接
crates.iophf_shared0.13.1间接
crates.iopotential_utf0.1.5间接
crates.ioprecomputed-hash0.1.1间接
crates.ioproc-macro21.0.95间接
crates.ioquote1.0.45间接
crates.ioredox_syscall0.5.12间接
crates.ioscopeguard1.2.0间接
crates.ioserde1.0.219间接
crates.ioserde_derive1.0.219间接
crates.ioshlex1.3.0间接
crates.iosiphasher1.0.1间接
crates.iosmallvec1.15.1间接
crates.iostable_deref_trait1.2.1间接
crates.iostring_cache_codegen0.6.1间接
crates.iosyn2.0.101间接
crates.iosynstructure0.13.2间接
crates.iotendril0.5.0间接
crates.iotikv-jemalloc-sys0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7间接
crates.iotinystr0.8.3间接
crates.iounicode-ident1.0.18间接
crates.ioutf-80.7.6间接
crates.ioutf8_iter1.0.4间接
crates.ioweb_atoms0.2.3间接
crates.iowindows-targets0.52.6间接
crates.iowindows_aarch64_gnullvm0.52.6间接
crates.iowindows_aarch64_msvc0.52.6间接
crates.iowindows_i686_gnu0.52.6间接
crates.iowindows_i686_gnullvm0.52.6间接
crates.iowindows_i686_msvc0.52.6间接
crates.iowindows_x86_64_gnu0.52.6间接
crates.iowindows_x86_64_gnullvm0.52.6间接
crates.iowindows_x86_64_msvc0.52.6间接
crates.iowriteable0.6.3间接
crates.ioyoke0.8.2间接
crates.ioyoke-derive0.8.2间接
crates.iozerofrom0.1.8间接
crates.iozerofrom-derive0.1.7间接
crates.iozerotrie0.2.4间接
crates.iozerovec0.11.6间接
crates.iozerovec-derive0.11.3间接
依赖安全公告 1

该仓库未发布可被索引解析的包,因此评估的是其自身的依赖图——共 78 个包,其中也包含从不交付的开发与测试版本固定:1 个存在已知公告,0 个为直接依赖。

软件包版本关系严重程度公告数修复版本
paste1.0.15间接未知1

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "browser",
        "cdp",
        "headless",
        "playwright",
        "puppeteer",
        "zig",
        "browser-automation",
        "lightpanda"
      ],
      "is_fork": false,
      "size_kb": 68698,
      "has_wiki": false,
      "homepage": "https://lightpanda.io",
      "languages": {
        "Go": 1143,
        "Nix": 1960,
        "Zig": 6500088,
        "HTML": 1668725,
        "Rust": 73344,
        "Makefile": 4933,
        "Dockerfile": 3194,
        "JavaScript": 37748
      },
      "pushed_at": "2026-07-23T07:11:44Z",
      "created_at": "2023-02-07T15:19:34Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T08:40:06Z",
      "description": "Lightpanda: the headless browser designed for AI and automation",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "AGPL-3.0",
      "default_branch": "main",
      "license_spdx_raw": "AGPL-3.0",
      "primary_language": "Zig",
      "significant_languages": [
        "Zig",
        "HTML"
      ]
    },
    "owner": {
      "blog": "https://lightpanda.io",
      "name": "Lightpanda",
      "type": "Organization",
      "login": "lightpanda-io",
      "company": null,
      "location": null,
      "followers": 361,
      "avatar_url": "https://avatars.githubusercontent.com/u/145980012?v=4",
      "created_at": "2023-09-25T09:58:55Z",
      "is_verified": null,
      "public_repos": 32,
      "account_age_days": 1031
    },
    "license": {
      "state": "standard",
      "spdx_id": "AGPL-3.0",
      "raw_spdx": "AGPL-3.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "0.3.5",
          "kind": "patch",
          "published_at": "2026-07-17T10:15:11Z"
        },
        {
          "tag": "0.3.4",
          "kind": "patch",
          "published_at": "2026-07-01T16:25:52Z"
        },
        {
          "tag": "0.3.3",
          "kind": "patch",
          "published_at": "2026-06-23T06:59:28Z"
        },
        {
          "tag": "0.3.2",
          "kind": "patch",
          "published_at": "2026-06-16T08:33:19Z"
        },
        {
          "tag": "0.3.1",
          "kind": "patch",
          "published_at": "2026-05-26T16:05:01Z"
        },
        {
          "tag": "0.3.0",
          "kind": "minor",
          "published_at": "2026-05-13T14:19:58Z"
        },
        {
          "tag": "0.2.9",
          "kind": "patch",
          "published_at": "2026-04-24T13:02:48Z"
        },
        {
          "tag": "0.2.8",
          "kind": "patch",
          "published_at": "2026-04-02T14:14:31Z"
        },
        {
          "tag": "0.2.7",
          "kind": "patch",
          "published_at": "2026-03-25T21:01:58Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-03-14T08:56:10Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-03-03T16:52:49Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-02-19T10:00:53Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-02-11T07:38:25Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-01-29T09:28:53Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-01-19T10:11:35Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-01-08T08:01:32Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-01-07T19:42:43Z"
        },
        {
          "tag": "nightly",
          "kind": "other",
          "published_at": "2024-07-16T10:45:32Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "a50c38b67220f9198343c0fbbb8ff13a9558414b",
          "body": "cdp: expose child frame metadata",
          "is_bot": false,
          "headline": "Merge pull request #3016 from Ppsoft1991/fix/cdp-frame-parent",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-23T04:43:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6374dab634ea0300ae10760851519680851ef05a",
          "body": "This has the benefit of avoiding a few arena dupes, but those were small. The\nreal benefit is consistency with the rest of the code.",
          "is_bot": false,
          "headline": "refactor: Use JSON writer to serialize CDP Frame",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-23T04:22:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f88564b56dfb2cee565cc6d4dcd51d2432b776d1",
          "body": "Include parentId on child frame navigation events and recursively serialize child frames in Page.getFrameTree using their live frame and loader IDs.\n\nFixes #3014",
          "is_bot": false,
          "headline": "cdp: expose child frame metadata",
          "author_name": "Ppsoft1991",
          "author_login": "Ppsoft1991",
          "committed_at": "2026-07-23T04:08:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d77c501db89139b84bf3b80fddc032f63a905f7",
          "body": "webapi: derive SVG prototype chains",
          "is_bot": false,
          "headline": "Merge pull request #3012 from mh0pe/codex/svg-01-factory",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-23T02:31:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7140cfab5ae1e7719b8880bb48fa08f53e1db7f7",
          "body": null,
          "is_bot": false,
          "headline": "webapi: derive SVG prototype chains",
          "author_name": "Madison Steiner",
          "author_login": "mh0pe",
          "committed_at": "2026-07-23T00:05:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f82bdcd51d18012f10fdb8dfe8c5c7b69a00e18",
          "body": "browser: inline finalizer callbacks",
          "is_bot": false,
          "headline": "Merge pull request #3026 from staylor/inline-finalizer-callbacks",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-23T00:02:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95ed50500b09c87b2578f0cfa1c7e81704a3fb85",
          "body": "webapi: Improve ResizeObserver",
          "is_bot": false,
          "headline": "Merge pull request #3000 from lightpanda-io/resize-observer",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:48:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd19246b4526dfab5a29b32b97c2c3ed1a9c0300",
          "body": "perf: Improve Runner tick signaling on macrotask-only wait",
          "is_bot": false,
          "headline": "Merge pull request #2999 from lightpanda-io/runner-tick-signal",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:48:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbbbfc7314c30215ab12805cb427cd9678bcc938",
          "body": "script: route console output through an optional sink",
          "is_bot": false,
          "headline": "Merge pull request #3024 from lightpanda-io/agent-console-sink",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:33:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f562330c80b4c60d6056d5ec74efe74d9110271",
          "body": "Currently, Runner assumes that HttpClient.tick did something. But it's possible\nthat HttpClient had nothing to do, and thus didn't poll. In that case, Runner\nwould return .{.ok = 0} and Runner's caller would also certainly call\nRunner.tick again, resulting in a spin-loop.\n\nThe reason Runner allows t\n[…]\nen HttpClient.tick has done nothing, Runner will return its\nms_to_next_task, rather than 0.\n\nOn sites where all i/o is completed, and only macrotasks are waiting, this\nsignificantly reduces CPU usage.",
          "is_bot": false,
          "headline": "perf: Improve Runner tick signaling on macrotask-only wait",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:28:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e88b4b67793b6c0a10bff38a1e0790802c92e3f7",
          "body": null,
          "is_bot": false,
          "headline": "zig 0.16",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:27:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61fd04d3a52b67a97f612a1ea2b0e0a3a087204a",
          "body": "This gives ResizeObserver a touch up that brings it on par with how the more\nflushed out IntersectionObserver behaves. While it's impossible to fully\nimplement this in a headless world, we can correctly emit ResizeObserverEntry\nin a number of important cases, e.g. visibility change, and style width/height\nchanges.\n\nMost importantly, we not execute the callback on the initial observe, which can\nunlock some cases.",
          "is_bot": false,
          "headline": "webapi: Improve ResizeObserver",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:23:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e143310467c47854200425447f47a5e81772856",
          "body": "websocket, wpt: Improve websocket WPT results + flakiness",
          "is_bot": false,
          "headline": "Merge pull request #3017 from lightpanda-io/websocket-improvements",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T23:23:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2be09b51994a7d4e3eed0ce113efee735ab387c8",
          "body": "Assisted-By: devx/3b7fd0ba-7378-40f0-a356-c0f5ce04cd1e",
          "is_bot": false,
          "headline": "browser: inline finalizer callbacks",
          "author_name": "Scott Taylor",
          "author_login": "staylor",
          "committed_at": "2026-07-22T16:52:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb2f1a7fe3d3912e522387c4d54a5f7bd4d2026b",
          "body": "cdp: preserve node IDs across child frame navigation",
          "is_bot": false,
          "headline": "Merge pull request #3020 from raj921/codex/fix-cdp-detached-node",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-22T16:20:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c451cd763a3d4ae8df76b987e98556fe56c0461e",
          "body": "1 - Blocks connection to \"bad\" ports\n2 - new WebSocket('...'); mostly returns the instance, and errors are emitted\n    in a close event (1)\n3 - More validation (no # allowed, ...);\n4 - http -> ws, https -> wss  (yes, per spec)\n\nThere's also some groundwork for better float16 support, but it turns ou\n[…]\ne a new v8 build to complete. So I left the harmless float16 mapping\nin (but, without the matching Float16Array, it doesn't help much).\n\n(1) Some things cause an exception to be raised, but most don't",
          "is_bot": false,
          "headline": "websocket, wpt: Improve websocket WPT results + flakiness",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T15:31:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e1202b76600f96f6e85286494ee30aedeaacb4e6",
          "body": "Since the Zig 0.16 merge, console.log and completion echoes from the\nagent runtime tests reach the real stdout (0.15 silently swallowed\nthem), polluting the bench.json that CI captures from 'zig build test'\nand breaking the perf-fmt job's JSON decoding.\n\nAdd Runtime.console_sink: when set, console lines write there instead\nof stdout/stderr. The three printing tests now capture their output\nand assert it, covering console argument joining and the top-level\nreturn echo.",
          "is_bot": false,
          "headline": "script: route console output through an optional sink",
          "author_name": "Adrià Arrufat",
          "author_login": "arrufat",
          "committed_at": "2026-07-22T15:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12fa469214bf27bde836c0161332f5fbc1641948",
          "body": "zig: use posix shim for shutdown",
          "is_bot": false,
          "headline": "Merge pull request #3023 from lightpanda-io/zig-16-merge-fix-2",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T14:34:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abdd9f003716782e7fa7510d1a878f35d0a17bb9",
          "body": null,
          "is_bot": false,
          "headline": "zig: use posix shim for shutdown",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T14:34:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0c8d4dc70cc07fff3f645a9504f7683b3fd3789",
          "body": "cdp: Improve dead-peer detection",
          "is_bot": false,
          "headline": "Merge pull request #3018 from lightpanda-io/improve-dead-peer-detection",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T14:01:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e55ace2969508c2f541a259cdf45748f22a824e",
          "body": "zig, minor: fix zig 0.16 merge",
          "is_bot": false,
          "headline": "Merge pull request #3021 from lightpanda-io/zig-16-merge-fix",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T13:59:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbecab3910747cf4ba97bb018638e366203f50aa",
          "body": null,
          "is_bot": false,
          "headline": "zig, minor: fix zig 0.16 merge",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T13:48:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e979a317ad8a250ad6b325f94118d4cb686f0304",
          "body": "zig: Zig 0.16",
          "is_bot": false,
          "headline": "Merge pull request #3007 from lightpanda-io/zig-0.16",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T13:43:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e31e45bcf627d1bd6ef28ab94cc75638610af4e",
          "body": null,
          "is_bot": false,
          "headline": "cdp: preserve node IDs across child frame navigation",
          "author_name": "raj921",
          "author_login": "raj921",
          "committed_at": "2026-07-22T11:45:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29e31377ed6905ee2b9aa42cdccba431d2a777f5",
          "body": "1 - On linux, set TCP_USER_TIMEOUT to 10 seconds. This closes the gap where\n    TCP_KEEPALIVE doesn't trigger if there are un-ack'd writes\n\n2 - shutdown the socket on cases where we know the peer is gone. This would\n    unblock a worker blocked on a send()",
          "is_bot": false,
          "headline": "cdp: Improve dead-peer detection",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T10:37:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32280e6864e9612920bbce80a022941174c5fdf0",
          "body": "Interrupt nested script waits during teardown",
          "is_bot": false,
          "headline": "Merge pull request #3010 from staylor/fix/issue-3009",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T08:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0cb9c3aebbd77d3f170e8cc54d4dc734c322baa1",
          "body": null,
          "is_bot": false,
          "headline": "dedupe check and centralize it in HttpClient's tickSync",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T08:41:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0871b6a8daf42a13d213e6c37084a173972add2e",
          "body": "Make sure jemallocator is disabled in Release builds (we only use it in Debug\nbuilds to collect metrics. Supposedly something changed in our 0.16 build that\ncauses it to be initialized even though it isn't used. Not sure, for this, I'm\njust doing what Claude tell me, but disabling something in Release that I know\nwe aren't using sounds ok).",
          "is_bot": false,
          "headline": "disable Zig 0.16 signal_stack_size",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T05:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92537df123cb0b7467a5f8ae7235d9b16eecc967",
          "body": "We've been climbing the last couple weeks, and Zig 0.16 appears to have added\n~400KB. I'll try to go hunt it, but I don't want this to delay the merge.\n\n(Pierre agrees)",
          "is_bot": false,
          "headline": "Raise memory limit regression to 29MB",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T05:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "802862120f7a9255833a893abbfdad1548fd6ff1",
          "body": null,
          "is_bot": false,
          "headline": "update zenai dep (zig 0.16)",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T05:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df7bde233d2bf95ae787284b46dc1e9912050c69",
          "body": "Try to fix CI (this is what claude came up with, I have no idea why CI is\nfailing).",
          "is_bot": false,
          "headline": "Fix linux build",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T05:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e42d63c1c567c49023fc1c4836fff56a6bbe2ca",
          "body": "Built against https://github.com/lightpanda-io/zig-v8-fork/tree/zig-0.16 but\nit doesn't require a new v8 build.\n\nBuilt against https://github.com/lightpanda-io/boringssl-zig/tree/zig-0.16\nsince the current fork we point to isn't updated.\n\nA global std.Io instance, lp.io. Way easier this way and requ\n[…]\ne, but it locks my computer, consuming RAM until MacOS\ngives me a popup I've never seen before, begging me to start killing processes.\n\nAgent and the networking stuff saw the most significant changes.",
          "is_bot": false,
          "headline": "zig: Zig 0.16",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T05:26:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a3ef296c0af0ba068895bf568bb49fb06bed1e6",
          "body": "overflow: Make RC a u32",
          "is_bot": false,
          "headline": "Merge pull request #3011 from lightpanda-io/rc-overflow",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T05:19:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a100c49cee43580339ad7071cc139a57b3e1b23f",
          "body": "Remove the RC(T) generic, make the counter always a u32. We've now seen two\nu8 overflow cases. Time to eliminate them all.",
          "is_bot": false,
          "headline": "overflow: Make RC a u32",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-22T01:39:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a12032cd0e0077d6c85a222839110a758230a57e",
          "body": "Assisted-By: devx/8bea7794-aef3-4ef5-a06d-fd1f1f3aafd0",
          "is_bot": false,
          "headline": "Interrupt nested script waits during teardown",
          "author_name": "Scott Taylor",
          "author_login": "staylor",
          "committed_at": "2026-07-21T22:07:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90db5d7f698636196502aea377475b94f601efee",
          "body": "perf, v8: reduce gc hint frequency",
          "is_bot": false,
          "headline": "Merge pull request #3005 from lightpanda-io/reduce-gc-hint-frequency",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-21T10:44:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea13c57dcd8b71b3dfe1deab408ef3d0efb13b32",
          "body": "wpt: adjust concurrency",
          "is_bot": false,
          "headline": "Merge pull request #3006 from lightpanda-io/wpt-adjust",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-21T10:00:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd35c0d01a4ff5ddaf7e763e7d5e04fab5df4006",
          "body": null,
          "is_bot": false,
          "headline": "wpt: adjust concurrency",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-21T09:38:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea2008334f9bb0f1fcb3d580e3be13cc4f2201be",
          "body": "Add per-CDP control for Network.setCacheDisabled",
          "is_bot": false,
          "headline": "Merge pull request #2990 from staylor/scott/http-cache-interception",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-21T08:06:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69b3424b9c720f3fb4709b5069cba13936cd17d6",
          "body": "This reverts commit aa4323f72b0e8fb600c08874cb8c7af8f88a2abd.",
          "is_bot": false,
          "headline": "Revert \"experiment: On session teardown, use less aggressive v8 GC hint\"",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-21T02:34:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa4323f72b0e8fb600c08874cb8c7af8f88a2abd",
          "body": "critical -> moderate",
          "is_bot": false,
          "headline": "experiment: On session teardown, use less aggressive v8 GC hint",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-21T02:06:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eca8baf8ed280295d46f8d81d2f8672424fbf5ce",
          "body": "We currently send a memoryPressureNotification every second during a run. This\ncan put too much pressure on v8, manifesting as high CPU usage particularly on\ncomplex pages. This commit changes it to every 5 seconds.\n\nAlso, remove unused lowMemoryNotification.v8, perf: Reduce v8 GC hint frequency.",
          "is_bot": false,
          "headline": "v8, perf: Reduce v8 GC hint frequency.",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-21T00:58:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7850a4012c183b43ca970c04032652af9d6c0eb",
          "body": "Assisted-By: devx/2fa2960e-76f4-4b6e-b6e6-1419f108f12b",
          "is_bot": false,
          "headline": "Add per-CDP cache disable configuration",
          "author_name": "Scott Taylor",
          "author_login": "staylor",
          "committed_at": "2026-07-20T18:02:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd9492f29ceb2b5ea5bef64f121ad3bfe7b8701b",
          "body": "…tError\n\nwebapi: On script error, trigger window.reportError",
          "is_bot": false,
          "headline": "Merge pull request #3003 from lightpanda-io/script-error-window-repor…",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-20T15:53:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5ee29d99d216c17012d272cfbd955f08914362f",
          "body": "ci: add plumber to watch workflow security",
          "is_bot": false,
          "headline": "Merge pull request #2985 from Totara-thib/plumber-ci",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-20T15:27:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c5bde28df38ce853592860f8038f9ae61d58bee",
          "body": "Besides this being correct, it should improve WPT stalls by triggering the\nwindow.onerror which the WPT harness hooks into to stop tests.",
          "is_bot": false,
          "headline": "webapi: On script error, trigger window.reportError",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T13:50:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e25ea46cd8b939b95e90f098ad1f91b3e4d6540d",
          "body": "Co-authored-by: Pierre Tachoire <pierre@tch.re>",
          "is_bot": false,
          "headline": "chore(readme): remove plumber badge",
          "author_name": "Thibaud-Vdb",
          "author_login": "Totara-thib",
          "committed_at": "2026-07-20T13:33:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d553ff5ee13a5bc7132585fce8410213b6dc765",
          "body": "Runs on pushes to main and on pull requests. The config starts from\nthe generated defaults and is scoped to this repo: the few controls\nthat are off carry a note explaining why and what would let them\ncome back on.\n\nReports are uploaded to code scanning, except on PRs from forks\nwhere the token cannot write security events. Each run on main also\npublishes the score through OIDC, which feeds the live badge added\nto the README next to the existing ones.",
          "is_bot": false,
          "headline": "ci: add plumber to watch workflow security",
          "author_name": "Thibaud-Vdb",
          "author_login": "Totara-thib",
          "committed_at": "2026-07-20T13:12:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32479b12999cc60388c1ae9bc6fa5d489440fb6c",
          "body": "ci: pin github actions to commit shas",
          "is_bot": false,
          "headline": "Merge pull request #2984 from Totara-thib/pin-actions",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-20T13:12:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cca00c022e11ab33e1199ed7dad5de56104d6995",
          "body": "Mutable tags like @v6 can be re-pointed by whoever controls the action,\nso the next run executes code nobody here reviewed, with the job's\ntoken and secrets. Pinning to the full commit sha freezes what runs.\nVersion tags are kept as comments so renovate or dependabot can still\ntrack updates.\n\ndtolnay/rust-toolchain is pinned to a master commit with the toolchain\nmoved to an explicit input, as its readme recommends for sha pinning.",
          "is_bot": false,
          "headline": "ci: pin github actions to commit shas",
          "author_name": "Thibaud-Vdb",
          "author_login": "Totara-thib",
          "committed_at": "2026-07-20T12:56:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ded9da77332fa858fabb0b060f59c9039e50332",
          "body": "Cookie store",
          "is_bot": false,
          "headline": "Merge pull request #2995 from lightpanda-io/cookie-store",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T12:16:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "795c1a96bb15b89597b3f73c42cb132c679eeb8c",
          "body": "iframe: load about:blank on un-parsable URL",
          "is_bot": false,
          "headline": "Merge pull request #2988 from lightpanda-io/iframe-invalid-url",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T10:50:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42f089780c68f9586d2f20690a650d77dea01266",
          "body": null,
          "is_bot": false,
          "headline": "move stripFragment to URL.zig",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T10:47:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d59f0eec2d619bc9d1d64a16da7c2d7d2dc7409",
          "body": "Add WebDriver.getNamedCookie to give WPT access to http-only cookie.",
          "is_bot": false,
          "headline": "uaf: Fix potential UAF from js-created CookieChangeEvent",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T10:47:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cdf8b441ea91a5c0edc872e1410aefdbfa12e10",
          "body": "Normalize get name so that it matches the normalize stored cookie name.\n\nDon't queue cookie change event if there's no listener. This one's a bit tricky\nsince we do this check inside the callback already. But that means a listener\nadded after the event is created (but before it's delivered) gets a change\nevent it should not. So we need to check it both at event-creation time and\nat delivery time.",
          "is_bot": false,
          "headline": "webapi: Support max-age for CookieStore",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T10:47:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9090869420736c03c85f1b034ef87d292f5ae82f",
          "body": "webapi: Blob shared per origin",
          "is_bot": false,
          "headline": "Merge pull request #2991 from lightpanda-io/blob-origin",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T10:46:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5736be97407d9c18ba2961abca5c900919e8ca83",
          "body": "robots.txt: Improve robots.txt correctness.",
          "is_bot": false,
          "headline": "Merge pull request #2997 from lightpanda-io/robots-fix",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T10:41:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a9b93becce77889b2b798a8f9b4c5574ace6859",
          "body": "This applies two individual fixes to our robots.txt parser. The first is that\ninstead of doing an exact match with the User-Agent, it extracts the\n\"productToken\". A UA of Lightpanda/1.0, should match \"Lightpanda\". The second is\nthat an empty directive matches.\n\nGiven:\n\nUser-agent: Lightpanda\nDisallo\n[…]\nons. Fix #1 is necessary, otherwise\n\"Lightpanda\" != \"Lightpanda/1.0\". Fix #2 is necessary  because this robots.txt\ndoes _not_ disallow Lightpanda from anything (e.g. the fallback doesn't apply\nto us).",
          "is_bot": false,
          "headline": "robots.txt: Improve robots.txt correctness.",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T07:00:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0cffa933d466a59074b0b0e341b11367004079e9",
          "body": "cache: Never cache the top-level root page",
          "is_bot": false,
          "headline": "Merge pull request #2996 from lightpanda-io/root-page-no-cache",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-20T06:58:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e1e0454589060848c8f64b577907b7ea4ff38a1",
          "body": "wpt: set a memory limit per browser instead of per process",
          "is_bot": false,
          "headline": "Merge pull request #2998 from lightpanda-io/wpt-change",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-20T06:58:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af3a552af7232eebe3f98af1c7e95f94df278573",
          "body": null,
          "is_bot": false,
          "headline": "wpt: set a memory limit per browser instead of per process",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-20T06:29:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "299eb2c5f925aabafa3036a44e85bf8ba738f85c",
          "body": "…-dispatch\n\nperf: If a message is dispatched, don't poll",
          "is_bot": false,
          "headline": "Merge pull request #2989 from lightpanda-io/http-client-no-poll-after…",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-19T00:37:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "996815d5703cc240d4a02bb2167a68a973c407d8",
          "body": null,
          "is_bot": false,
          "headline": "zig fmt",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-18T09:19:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86bf28216ad0581dcccedd4856cad2361539ca54",
          "body": "This reworks blob URLs from being owned by the Frame to being owned by the Page\nand shared / protected by origin. This allows, for example, a worker/popup/\niframe from accessing blobs created by its page, provided they share the same\norigin.\n\nThis was already working on a small (but common) set of cases, but has now been\nreworked (by moving the blob registry up to the Page, where it can be shared) to\ncover every case.",
          "is_bot": false,
          "headline": "webapi: Blob shared per origin",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-18T06:24:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20cde7a6f59b672d49c9f14f53207bcc7cf86d60",
          "body": "Polling delays processing of messages. So don't poll after we know we've\ndispatched. Largely impacts CDP which is more likely to poll (for data on the\nCDP connection).",
          "is_bot": false,
          "headline": "perf: If a message is dispatched, don't poll",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-18T01:54:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc461e05a93a0284d63f438bfc15df127b3b89c5",
          "body": "cli: add `run` command for script replay",
          "is_bot": false,
          "headline": "Merge pull request #2920 from lightpanda-io/run-command",
          "author_name": "Adrià Arrufat",
          "author_login": "arrufat",
          "committed_at": "2026-07-17T21:59:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "805b60d626fbe8ebb2d384dba97cc127ed9a7102",
          "body": "# Conflicts:\n#\tsrc/Config.zig\n#\tsrc/help.zon",
          "is_bot": false,
          "headline": "Merge branch 'main' into run-command",
          "author_name": "Adrià Arrufat",
          "author_login": "arrufat",
          "committed_at": "2026-07-17T20:46:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac0e6c86a9c4e0adbd6315e24df1294a54c1b69f",
          "body": "Dispose Event for `NavigationHistoryEntry`",
          "is_bot": false,
          "headline": "Merge pull request #2970 from lightpanda-io/navigation-dispose-event",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T13:31:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b6b17240e20743ec9e347bf3cea22bda92334ac",
          "body": "Spec says this is what we should do and it's apparently used a part of bot\ndetections (because bots don't load about:blank and thus the iframe's state\ncan easily be checked to be invalid, I guess).",
          "is_bot": false,
          "headline": "iframe: load about:blank on un-parsable URL",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T12:45:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11f97772821b97a648ca98abe84b0ad8b6d4a3bf",
          "body": "The idea is that, for most cases, the top level page isn't revisited, so\ncaching is just overhead + wasted space. Plus, if someone does revisit it,\nchances are they want a fresh copy.\n\nImagine someone scraping a typical ecommerce site. Sure, they want to cache\nthe .js files which get re-used from product to product. But do they want to\ncache each individual product page?",
          "is_bot": false,
          "headline": "cache: Never cache the top-level root page",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T10:55:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4ea8153695c81a3f67cb7a1612af58e147493c6",
          "body": "cli: page help output through $PAGER when stdout is a tty",
          "is_bot": false,
          "headline": "Merge pull request #2981 from lightpanda-io/help-pager",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T10:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b110ff5c5217893729facaa6b81410c87ffcdf1",
          "body": "The disposed entries are already out of _entries, so an error during\nthe currententrychange dispatch leaked their _on_dispose callbacks\n(onRemoveFrame only walks _entries). Fire dispose in a defer and log\nper-entry failures instead of propagating them.",
          "is_bot": false,
          "headline": "fire dispose even when currententrychange dispatch fails",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T10:04:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f02fba40cd1a94b6311294268cd14be88fcd9eae",
          "body": "std.start.maybeIgnoreSigpipe() already installs a noop SIGPIPE handler\nat startup (std.options.keep_sigpipe defaults to false), so a write to\na dead pager returns error.BrokenPipe — which the existing catch\nhandles — instead of killing the process. The manual SIG_IGN was also\nthe disposition std deliberately avoids, since ignored dispositions\nsurvive exec and would leak to child processes.",
          "is_bot": false,
          "headline": "cli: drop redundant SIGPIPE ignore in the help pager",
          "author_name": "Adrià Arrufat",
          "author_login": "arrufat",
          "committed_at": "2026-07-17T09:50:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a995f954464e6826c6bc8509fc00c4eb5a4267f",
          "body": null,
          "is_bot": false,
          "headline": "fire dispose after currententrychange per spec",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T09:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c0c2920db37a1c5dada8120a2c4cc4564c31cde",
          "body": null,
          "is_bot": false,
          "headline": "release previous oncurrententrychange on overwrite",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T09:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf775696de0eab08987f437f06ff19fdaa584a8b",
          "body": null,
          "is_bot": false,
          "headline": "don't skip dispose dispatch when ondispose is unset",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T09:17:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a59abc7f4f1573ea76f9bd1fe683362f81535e6e",
          "body": "cdp: emit non-UTF-8 header values as Latin-1 strings, not byte arrays",
          "is_bot": false,
          "headline": "Merge pull request #2972 from lightpanda-io/sanitize-utf8-headers",
          "author_name": "Pierre Tachoire",
          "author_login": "krichprollsch",
          "committed_at": "2026-07-17T08:06:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bea30ac4e48d33b8b2b498d2bc2e378ee4a1ac7",
          "body": null,
          "is_bot": false,
          "headline": "clear callbacks on onRemoveFrame for Navigation",
          "author_name": "Muki Kiboigo",
          "author_login": "mookums",
          "committed_at": "2026-07-17T08:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0c0b3fe3a01f1a180855bacd3631f2b51212bc0",
          "body": null,
          "is_bot": false,
          "headline": "release on dispose",
          "author_name": "Muki Kiboigo",
          "author_login": "mookums",
          "committed_at": "2026-07-17T08:01:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ba8d8c564714e21a4365331fdfec138029b2149",
          "body": null,
          "is_bot": false,
          "headline": "fix reentrancy on dispose and clean up",
          "author_name": "Muki Kiboigo",
          "author_login": "mookums",
          "committed_at": "2026-07-17T08:00:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35f128d2641dfdb63022d6ee1193c08ff74f688a",
          "body": null,
          "is_bot": false,
          "headline": "use hasDirectListeners for fireDispose",
          "author_name": "Muki Kiboigo",
          "author_login": "mookums",
          "committed_at": "2026-07-17T07:57:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b19b57250a060f88a5114c12b004f2c63676a0b0",
          "body": "css: apply @layer block rules to the cascade",
          "is_bot": false,
          "headline": "Merge pull request #2719 from navidemad/css-layer-cascade",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T03:49:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28b4a31b590d2390c95ff7acd675f2130bf8aff4",
          "body": "…times\n\nwebapi: bound scroll task allocations; tighten DOM allocation lifetimes",
          "is_bot": false,
          "headline": "Merge pull request #2963 from lightpanda-io/dom-pr-22-allocation-life…",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T03:28:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50a896f4c0a2ab3eeadea74bef364c6924bdf5fa",
          "body": "Use the call arena only for the AbortSignal dependent list that must survive re-entrant abort handlers, and move scratch-only DOM reads to the local arena. Store BeforeUnloadEvent.returnValue in the event-owned arena so it remains valid without accumulating in the longer-lived frame arena.\n\nThese allocator changes bound temporary memory to the shortest safe lifetime while preserving existing Web API behavior. Add coverage for replacing BeforeUnloadEvent.returnValue.",
          "is_bot": false,
          "headline": "webapi: tighten DOM allocation lifetimes",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-17T02:52:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f42b72d18ce342674acf7af96871b78b80a69a6",
          "body": "Keep one slab-allocated scheduler task per active element scroll sequence and recycle it on completion or scheduler cancellation. This prevents repeated programmatic scrolling from growing the frame arena and task queue without bound.\n\nAdvance the throttle state before dispatching scroll and scrollend so nested JavaScript callbacks cannot be overwritten, and avoid scheduling events for clamped no-op scrollBy calls. Add coverage for coalescing, both re-entrant event paths, and no-op scrolling.",
          "is_bot": false,
          "headline": "webapi: bound element scroll task allocations",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-17T02:52:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cebd1c1ce1b210cbd3d9f9de6409000fecfa824",
          "body": "…fragment-nav\n\nwebapi: handler return-false cancels events; same-fragment navigations don't reload",
          "is_bot": false,
          "headline": "Merge pull request #2962 from lightpanda-io/dom-pr-21-handler-return-…",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T02:51:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51dbad5a6a736d1ddac8e6c0c6c7e2b6c8f0c616",
          "body": null,
          "is_bot": false,
          "headline": "allow location.reload() on fragmented url to cause navigation",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T02:40:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65a3ce33c0503d0c757d98e787de028b2a488400",
          "body": "Review pattern from #2943: prefer the local arena for scratch-only\nallocations. scheduleNavigation dupes the URL into its own arena\nsynchronously at entry, so the normalized fragment does not need to\nsurvive the call.\n\nCo-Authored-By: Karl Seguin <karlseguin@users.noreply.github.com>",
          "is_bot": false,
          "headline": "webapi: use the local arena for the normalized hash",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-17T02:12:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "027936ef9082662b217ea41debec702fefeebb49",
          "body": "After rebasing onto main, WPT\n/dom/events/Event-dispatch-single-activation-behavior.html went from\n3/132 to 0/0 (harness never reported): the test repeatedly clicks\n`<a href=\"#link\">` anchors and resets with `location.hash = \"\"`, and\nboth patterns ended up scheduling full same-URL reloads, putting t\n[…]\nignments.\n\nCoverage: /dom/events/Event-dispatch-single-activation-behavior.html\n0/0 -> 83/132 (3/132 before the rebase; the gain past 3 comes from\nthe handler-return-value fix in the previous commit).",
          "is_bot": false,
          "headline": "webapi: same-fragment navigations must not reload the page",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-17T02:12:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "daa3b1d4513c125a8038822dfbce531b02e9282b",
          "body": "After rebasing onto main (HttpClient refactor: queued navigations now\nreliably execute), WPT /dom/events/Event-dispatch-click.html went from\n33/33 to 0/0: its form subtests cancel submission with\n`form.onsubmit = () => { ...; return false }`, but the inline-handler\ninvocation discarded the return va\n[…]\nerage: /dom/events/Event-dispatch-click.html 0/0 -> 33/33\n(restores the previously claimed 33/33); also a prerequisite for\n/dom/events/Event-dispatch-single-activation-behavior.html (see next\ncommit).",
          "is_bot": false,
          "headline": "webapi: event handlers returning false cancel the event",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-17T02:12:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51607355082e6f03dcf70e2c5e8c63156050653d",
          "body": "webapi: cookie-averse docs, script insertion steps, moveBefore reactions, outerText",
          "is_bot": false,
          "headline": "Merge pull request #2961 from lightpanda-io/dom-pr-20-html-elements",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T02:09:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5ace3701f985fda50591dc1d31180225af3587a",
          "body": "Free temp DocumentFragment when possible",
          "is_bot": false,
          "headline": "Improve gating around nodeIsReadySubtree to prevent unnecessary calls",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T01:44:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef910479837a4936db824fd67cc237689232d091",
          "body": "…ment\n\nfeat(cdp): emit Page.navigatedWithinDocument for same-document navigations",
          "is_bot": false,
          "headline": "Merge pull request #2964 from rohitsux/feat/cdp-navigated-within-docu…",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T01:30:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e49d6f280d4eb75f1bc00ac35ae8a4125512ab5",
          "body": "Move notification directly into history. Improve test.",
          "is_bot": false,
          "headline": "Remove unused timestamp field",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-17T01:13:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76717324510344574b3f63ddc6b504b4e1070758",
          "body": "reject focus() on non-rendered elements (display:none)",
          "is_bot": false,
          "headline": "Merge pull request #2982 from lightpanda-io/focus-visible-only",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-16T23:50:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9205edb1f4dfd5da98b3834a6fa46e1631df000a",
          "body": "perf: Pre-parse HTML to find and preload scripts",
          "is_bot": false,
          "headline": "Merge pull request #2965 from lightpanda-io/script-preload",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-16T23:49:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d3bfeaa11da955a03ad8a1d9d80940fdbcabb42",
          "body": "webapi: Add SharedWorker",
          "is_bot": false,
          "headline": "Merge pull request #2977 from lightpanda-io/SharedWorker",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-16T23:49:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0098b12fce050ceb56bdd1da5d70355cecb69ed6",
          "body": "fix: Prevent class selector from doing substring match",
          "is_bot": false,
          "headline": "Merge pull request #2980 from lightpanda-io/class-selector-fix",
          "author_name": "Karl Seguin",
          "author_login": "karlseguin",
          "committed_at": "2026-07-16T23:48:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb23ad7cbb98d7e00df61c5d9c2fc9eb7f159761",
          "body": "…back\n\nFixes the failing subtest of WPT\n/dom/nodes/moveBefore/custom-element-move-reactions.html (5/6 -> 6/6):\nwhen a moved custom element defines no connectedMoveCallback, the\nfallback is disconnectedCallback + connectedCallback - and either may\nbe undefined. The error from invoking the missing dis\n[…]\nlerate a missing method and let the\nother one run.\n\nCoverage: /dom/nodes/moveBefore/custom-element-move-reactions.html\n5/6 -> 6/6 (fully green).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "webapi: moveBefore fires connectedCallback without a disconnectedCall…",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-16T23:47:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d8bc0bacf26440d34c39121cbf5f19a83a5f27b0",
          "body": "Fixes 10 failing files under /dom/nodes/insertion-removing-steps/\n(5/20 -> 15/20 files passing), which pin down when dynamically inserted\nscripts execute:\n\n- Scripts (and iframes/links/styles) appended to a DETACHED parent no\n  longer activate; the ready work is gated on the node being connected,\n  \n[…]\nad interleavings.\n\nCoverage: /dom/nodes/insertion-removing-steps/: 15/20 files passing\n(10 newly); /dom/nodes and /dom/events regressions clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "webapi: spec-conformant script insertion/execution steps",
          "author_name": "Francis Bouvier",
          "author_login": "francisbouvier",
          "committed_at": "2026-07-16T23:47:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 18,
      "commits_last_year": 5823,
      "latest_release_at": "2026-07-17T10:15:11Z",
      "latest_release_tag": "0.3.5",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 51,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 13.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 1430,
      "stars": 32085,
      "watchers": 84,
      "fork_history": {
        "days": [
          {
            "date": "2026-03-13",
            "count": 86
          },
          {
            "date": "2026-03-14",
            "count": 86
          },
          {
            "date": "2026-03-15",
            "count": 58
          },
          {
            "date": "2026-03-16",
            "count": 73
          },
          {
            "date": "2026-03-17",
            "count": 18
          },
          {
            "date": "2026-03-18",
            "count": 24
          },
          {
            "date": "2026-03-19",
            "count": 26
          },
          {
            "date": "2026-03-20",
            "count": 26
          },
          {
            "date": "2026-03-21",
            "count": 35
          },
          {
            "date": "2026-03-22",
            "count": 29
          },
          {
            "date": "2026-03-23",
            "count": 23
          },
          {
            "date": "2026-03-24",
            "count": 21
          },
          {
            "date": "2026-03-25",
            "count": 16
          },
          {
            "date": "2026-03-26",
            "count": 10
          },
          {
            "date": "2026-03-27",
            "count": 18
          },
          {
            "date": "2026-03-28",
            "count": 7
          },
          {
            "date": "2026-03-29",
            "count": 11
          },
          {
            "date": "2026-03-30",
            "count": 13
          },
          {
            "date": "2026-03-31",
            "count": 11
          },
          {
            "date": "2026-04-01",
            "count": 11
          },
          {
            "date": "2026-04-02",
            "count": 16
          },
          {
            "date": "2026-04-03",
            "count": 11
          },
          {
            "date": "2026-04-04",
            "count": 12
          },
          {
            "date": "2026-04-05",
            "count": 6
          },
          {
            "date": "2026-04-06",
            "count": 14
          },
          {
            "date": "2026-04-07",
            "count": 6
          },
          {
            "date": "2026-04-08",
            "count": 14
          },
          {
            "date": "2026-04-09",
            "count": 25
          },
          {
            "date": "2026-04-10",
            "count": 13
          },
          {
            "date": "2026-04-11",
            "count": 12
          },
          {
            "date": "2026-04-12",
            "count": 6
          },
          {
            "date": "2026-04-13",
            "count": 9
          },
          {
            "date": "2026-04-14",
            "count": 6
          },
          {
            "date": "2026-04-15",
            "count": 3
          },
          {
            "date": "2026-04-16",
            "count": 3
          },
          {
            "date": "2026-04-17",
            "count": 1
          },
          {
            "date": "2026-04-18",
            "count": 4
          },
          {
            "date": "2026-04-19",
            "count": 5
          },
          {
            "date": "2026-04-20",
            "count": 3
          },
          {
            "date": "2026-04-21",
            "count": 6
          },
          {
            "date": "2026-04-22",
            "count": 9
          },
          {
            "date": "2026-04-23",
            "count": 4
          },
          {
            "date": "2026-04-24",
            "count": 2
          },
          {
            "date": "2026-04-25",
            "count": 5
          },
          {
            "date": "2026-04-26",
            "count": 9
          },
          {
            "date": "2026-04-27",
            "count": 4
          },
          {
            "date": "2026-04-28",
            "count": 7
          },
          {
            "date": "2026-04-29",
            "count": 4
          },
          {
            "date": "2026-04-30",
            "count": 5
          },
          {
            "date": "2026-05-01",
            "count": 18
          },
          {
            "date": "2026-05-02",
            "count": 6
          },
          {
            "date": "2026-05-03",
            "count": 1
          },
          {
            "date": "2026-05-04",
            "count": 5
          },
          {
            "date": "2026-05-05",
            "count": 1
          },
          {
            "date": "2026-05-06",
            "count": 5
          },
          {
            "date": "2026-05-07",
            "count": 1
          },
          {
            "date": "2026-05-08",
            "count": 6
          },
          {
            "date": "2026-05-09",
            "count": 1
          },
          {
            "date": "2026-05-10",
            "count": 2
          },
          {
            "date": "2026-05-11",
            "count": 3
          },
          {
            "date": "2026-05-13",
            "count": 1
          },
          {
            "date": "2026-05-14",
            "count": 2
          },
          {
            "date": "2026-05-15",
            "count": 1
          },
          {
            "date": "2026-05-16",
            "count": 2
          },
          {
            "date": "2026-05-17",
            "count": 2
          },
          {
            "date": "2026-05-18",
            "count": 3
          },
          {
            "date": "2026-05-19",
            "count": 3
          },
          {
            "date": "2026-05-20",
            "count": 2
          },
          {
            "date": "2026-05-21",
            "count": 3
          },
          {
            "date": "2026-05-22",
            "count": 5
          },
          {
            "date": "2026-05-23",
            "count": 2
          },
          {
            "date": "2026-05-24",
            "count": 3
          },
          {
            "date": "2026-05-25",
            "count": 1
          },
          {
            "date": "2026-05-26",
            "count": 1
          },
          {
            "date": "2026-05-27",
            "count": 2
          },
          {
            "date": "2026-05-28",
            "count": 2
          },
          {
            "date": "2026-05-30",
            "count": 1
          },
          {
            "date": "2026-05-31",
            "count": 1
          },
          {
            "date": "2026-06-01",
            "count": 1
          },
          {
            "date": "2026-06-02",
            "count": 1
          },
          {
            "date": "2026-06-03",
            "count": 3
          },
          {
            "date": "2026-06-04",
            "count": 2
          },
          {
            "date": "2026-06-10",
            "count": 2
          },
          {
            "date": "2026-06-12",
            "count": 5
          },
          {
            "date": "2026-06-14",
            "count": 2
          },
          {
            "date": "2026-06-15",
            "count": 3
          },
          {
            "date": "2026-06-16",
            "count": 1
          },
          {
            "date": "2026-06-17",
            "count": 2
          },
          {
            "date": "2026-06-18",
            "count": 1
          },
          {
            "date": "2026-06-19",
            "count": 1
          },
          {
            "date": "2026-06-20",
            "count": 2
          },
          {
            "date": "2026-06-21",
            "count": 6
          },
          {
            "date": "2026-06-24",
            "count": 1
          },
          {
            "date": "2026-06-26",
            "count": 1
          },
          {
            "date": "2026-06-27",
            "count": 2
          },
          {
            "date": "2026-06-28",
            "count": 3
          },
          {
            "date": "2026-06-29",
            "count": 4
          },
          {
            "date": "2026-06-30",
            "count": 1
          },
          {
            "date": "2026-07-01",
            "count": 1
          },
          {
            "date": "2026-07-02",
            "count": 1
          },
          {
            "date": "2026-07-04",
            "count": 1
          },
          {
            "date": "2026-07-06",
            "count": 3
          },
          {
            "date": "2026-07-07",
            "count": 1
          },
          {
            "date": "2026-07-09",
            "count": 6
          },
          {
            "date": "2026-07-10",
            "count": 3
          },
          {
            "date": "2026-07-11",
            "count": 2
          },
          {
            "date": "2026-07-13",
            "count": 3
          },
          {
            "date": "2026-07-14",
            "count": 8
          },
          {
            "date": "2026-07-15",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 3
          },
          {
            "date": "2026-07-17",
            "count": 5
          },
          {
            "date": "2026-07-18",
            "count": 2
          },
          {
            "date": "2026-07-20",
            "count": 1
          },
          {
            "date": "2026-07-21",
            "count": 1
          },
          {
            "date": "2026-07-22",
            "count": 2
          }
        ],
        "complete": false,
        "collected": 1000,
        "total_forks": 1430
      },
      "star_history": null,
      "open_issues_and_prs": 92
    },
    "ai_readiness": {
      "has_nix": true,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "src/html5ever/Cargo.toml"
      ],
      "largest_source_bytes": 28947,
      "source_files_sampled": 74,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 1174
    },
    "dependencies": {
      "manifests": [],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "paste",
            "direct": false,
            "version": "1.0.15",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2024-0436"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 653
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 78,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [],
      "dependencies": [
        {
          "name": "html5ever",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.39.0"
        },
        {
          "name": "string_cache",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9.0"
        },
        {
          "name": "typed-arena",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.0.2"
        },
        {
          "name": "tikv-jemallocator",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6.1"
        },
        {
          "name": "tikv-jemalloc-ctl",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6.1"
        },
        {
          "name": "xml5ever",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.39.0"
        },
        {
          "name": "encoding_rs",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "idna",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.1.0"
        },
        {
          "name": "url",
          "manifest": "src/html5ever/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.5.8"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "encoding_rs",
            "direct": true,
            "version": "0.8.35",
            "ecosystem": "crates"
          },
          {
            "name": "html5ever",
            "direct": true,
            "version": "0.39.0",
            "ecosystem": "crates"
          },
          {
            "name": "idna",
            "direct": true,
            "version": "1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "string_cache",
            "direct": true,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "tikv-jemalloc-ctl",
            "direct": true,
            "version": "0.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "tikv-jemallocator",
            "direct": true,
            "version": "0.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "typed-arena",
            "direct": true,
            "version": "2.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "url",
            "direct": true,
            "version": "2.5.8",
            "ecosystem": "crates"
          },
          {
            "name": "xml5ever",
            "direct": true,
            "version": "0.39.0",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.9.1",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.39",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "displaydoc",
            "direct": false,
            "version": "0.2.6",
            "ecosystem": "crates"
          },
          {
            "name": "fastrand",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "form_urlencoded",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "icu_collections",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_locale_core",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_normalizer",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_normalizer_data",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_properties",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_properties_data",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "icu_provider",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "idna_adapter",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.172",
            "ecosystem": "crates"
          },
          {
            "name": "litemap",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "lock_api",
            "direct": false,
            "version": "0.4.13",
            "ecosystem": "crates"
          },
          {
            "name": "log",
            "direct": false,
            "version": "0.4.27",
            "ecosystem": "crates"
          },
          {
            "name": "markup5ever",
            "direct": false,
            "version": "0.39.0",
            "ecosystem": "crates"
          },
          {
            "name": "new_debug_unreachable",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "crates"
          },
          {
            "name": "parking_lot",
            "direct": false,
            "version": "0.12.4",
            "ecosystem": "crates"
          },
          {
            "name": "parking_lot_core",
            "direct": false,
            "version": "0.9.11",
            "ecosystem": "crates"
          },
          {
            "name": "paste",
            "direct": false,
            "version": "1.0.15",
            "ecosystem": "crates"
          },
          {
            "name": "percent-encoding",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "phf",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "phf_codegen",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "phf_generator",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "phf_shared",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "crates"
          },
          {
            "name": "potential_utf",
            "direct": false,
            "version": "0.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "precomputed-hash",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.95",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.45",
            "ecosystem": "crates"
          },
          {
            "name": "redox_syscall",
            "direct": false,
            "version": "0.5.12",
            "ecosystem": "crates"
          },
          {
            "name": "scopeguard",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": false,
            "version": "1.0.219",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive",
            "direct": false,
            "version": "1.0.219",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "siphasher",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "smallvec",
            "direct": false,
            "version": "1.15.1",
            "ecosystem": "crates"
          },
          {
            "name": "stable_deref_trait",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "string_cache_codegen",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.101",
            "ecosystem": "crates"
          },
          {
            "name": "synstructure",
            "direct": false,
            "version": "0.13.2",
            "ecosystem": "crates"
          },
          {
            "name": "tendril",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "tikv-jemalloc-sys",
            "direct": false,
            "version": "0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7",
            "ecosystem": "crates"
          },
          {
            "name": "tinystr",
            "direct": false,
            "version": "0.8.3",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "utf-8",
            "direct": false,
            "version": "0.7.6",
            "ecosystem": "crates"
          },
          {
            "name": "utf8_iter",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "web_atoms",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "writeable",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "crates"
          },
          {
            "name": "yoke",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "yoke-derive",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "zerofrom",
            "direct": false,
            "version": "0.1.8",
            "ecosystem": "crates"
          },
          {
            "name": "zerofrom-derive",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "zerotrie",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "zerovec",
            "direct": false,
            "version": "0.11.6",
            "ecosystem": "crates"
          },
          {
            "name": "zerovec-derive",
            "direct": false,
            "version": "0.11.3",
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 78,
        "direct_count": 9,
        "indirect_count": 69
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 22,
        "merged_prs": 2327,
        "open_issues": 70,
        "closed_ratio": 0.855,
        "closed_issues": 412,
        "closed_unmerged_prs": 196
      },
      "bus_factor": 2,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "karlseguin",
          "commits": 3311,
          "avatar_url": "https://avatars.githubusercontent.com/u/206480?v=4"
        },
        {
          "type": "User",
          "login": "krichprollsch",
          "commits": 2080,
          "avatar_url": "https://avatars.githubusercontent.com/u/562696?v=4"
        },
        {
          "type": "User",
          "login": "arrufat",
          "commits": 1042,
          "avatar_url": "https://avatars.githubusercontent.com/u/1671644?v=4"
        },
        {
          "type": "User",
          "login": "francisbouvier",
          "commits": 475,
          "avatar_url": "https://avatars.githubusercontent.com/u/5114029?v=4"
        },
        {
          "type": "User",
          "login": "nikneym",
          "commits": 373,
          "avatar_url": "https://avatars.githubusercontent.com/u/4337696?v=4"
        },
        {
          "type": "User",
          "login": "mookums",
          "commits": 367,
          "avatar_url": "https://avatars.githubusercontent.com/u/26614015?v=4"
        },
        {
          "type": "User",
          "login": "sjorsdonkers",
          "commits": 146,
          "avatar_url": "https://avatars.githubusercontent.com/u/72333389?v=4"
        },
        {
          "type": "User",
          "login": "navidemad",
          "commits": 127,
          "avatar_url": "https://avatars.githubusercontent.com/u/6686865?v=4"
        },
        {
          "type": "User",
          "login": "mrdimidium",
          "commits": 81,
          "avatar_url": "https://avatars.githubusercontent.com/u/24303010?v=4"
        },
        {
          "type": "User",
          "login": "egrs",
          "commits": 67,
          "avatar_url": "https://avatars.githubusercontent.com/u/28808383?v=4"
        }
      ],
      "contributors_sampled": 56,
      "top_contributor_share": 0.402
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "agent-regression.yml",
        "cla.yml",
        "e2e-integration-test.yml",
        "e2e-test.yml",
        "package-debian.yml",
        "plumber.yml",
        "release.yml",
        "wpt.yml",
        "zig-test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 6,
            "reason": "Found 9/13 approved changesets -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 13 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 7,
            "reason": "dependency not pinned by hash detected -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 6,
            "reason": "SAST tool is not run on all commits -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 9,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "a50c38b67220f9198343c0fbbb8ff13a9558414b",
        "ran_at": "2026-07-23T08:50:38Z",
        "aggregate_score": 5.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T07:06:05Z",
      "oldest_open_prs": [
        {
          "number": 2303,
          "created_at": "2026-04-28T16:51:55Z",
          "last_comment_at": "2026-05-05T02:08:19Z",
          "last_comment_author": "karlseguin"
        },
        {
          "number": 2423,
          "created_at": "2026-05-11T16:06:44Z",
          "last_comment_at": "2026-07-21T07:38:24Z",
          "last_comment_author": "maifeeulasad"
        },
        {
          "number": 2631,
          "created_at": "2026-06-03T15:36:21Z",
          "last_comment_at": "2026-07-21T03:39:20Z",
          "last_comment_author": "karlseguin"
        },
        {
          "number": 2645,
          "created_at": "2026-06-04T22:42:29Z",
          "last_comment_at": "2026-06-25T20:36:48Z",
          "last_comment_author": "urly3"
        },
        {
          "number": 2891,
          "created_at": "2026-07-06T09:28:01Z",
          "last_comment_at": "2026-07-09T03:05:23Z",
          "last_comment_author": "karlseguin"
        },
        {
          "number": 2899,
          "created_at": "2026-07-08T09:01:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2969,
          "created_at": "2026-07-15T11:44:45Z",
          "last_comment_at": "2026-07-19T23:42:34Z",
          "last_comment_author": "karlseguin"
        },
        {
          "number": 2983,
          "created_at": "2026-07-17T10:04:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3002,
          "created_at": "2026-07-20T13:45:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3004,
          "created_at": "2026-07-20T16:39:06Z",
          "last_comment_at": "2026-07-23T00:52:36Z",
          "last_comment_author": "mvanhorn"
        },
        {
          "number": 3008,
          "created_at": "2026-07-21T16:52:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3015,
          "created_at": "2026-07-22T07:02:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3019,
          "created_at": "2026-07-22T11:42:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3028,
          "created_at": "2026-07-22T17:24:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3029,
          "created_at": "2026-07-23T01:14:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3030,
          "created_at": "2026-07-23T01:14:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3032,
          "created_at": "2026-07-23T01:14:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3031,
          "created_at": "2026-07-23T01:14:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3033,
          "created_at": "2026-07-23T01:14:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3034,
          "created_at": "2026-07-23T01:14:04Z",
          "last_comment_at": "2026-07-23T02:45:16Z",
          "last_comment_author": "mh0pe"
        }
      ],
      "last_merged_pr_at": "2026-07-23T04:43:56Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 37,
          "created_at": "2023-09-27T16:04:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 29,
          "created_at": "2023-09-27T16:26:26Z",
          "last_comment_at": "2025-09-27T19:11:43Z",
          "last_comment_author": "mrdimidium"
        },
        {
          "number": 349,
          "created_at": "2025-01-08T10:32:29Z",
          "last_comment_at": "2026-02-05T06:39:25Z",
          "last_comment_author": "karlseguin"
        },
        {
          "number": 362,
          "created_at": "2025-01-17T18:30:01Z",
          "last_comment_at": "2025-02-12T22:44:34Z",
          "last_comment_author": "spidy0x0"
        },
        {
          "number": 375,
          "created_at": "2025-01-23T15:44:48Z",
          "last_comment_at": "2025-01-25T09:57:30Z",
          "last_comment_author": "itziklavon"
        },
        {
          "number": 382,
          "created_at": "2025-01-27T06:41:22Z",
          "last_comment_at": "2025-01-27T14:50:44Z",
          "last_comment_author": "krichprollsch"
        },
        {
          "number": 385,
          "created_at": "2025-01-27T14:53:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 386,
          "created_at": "2025-01-27T14:54:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 561,
          "created_at": "2025-04-23T10:45:11Z",
          "last_comment_at": "2025-04-25T17:23:31Z",
          "last_comment_author": "mikeptweet"
        },
        {
          "number": 565,
          "created_at": "2025-04-24T03:19:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 576,
          "created_at": "2025-04-25T23:29:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 736,
          "created_at": "2025-06-01T07:38:57Z",
          "last_comment_at": "2025-06-23T17:09:45Z",
          "last_comment_author": "krichprollsch"
        },
        {
          "number": 783,
          "created_at": "2025-06-16T09:01:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 882,
          "created_at": "2025-07-11T12:19:58Z",
          "last_comment_at": "2025-07-11T18:11:24Z",
          "last_comment_author": "pixelkoduje"
        },
        {
          "number": 925,
          "created_at": "2025-08-06T00:47:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 967,
          "created_at": "2025-08-24T07:33:11Z",
          "last_comment_at": "2025-09-22T09:24:41Z",
          "last_comment_author": "krichprollsch"
        },
        {
          "number": 1095,
          "created_at": "2025-09-27T08:17:18Z",
          "last_comment_at": "2025-11-19T12:57:45Z",
          "last_comment_author": "krichprollsch"
        },
        {
          "number": 1096,
          "created_at": "2025-09-28T19:51:55Z",
          "last_comment_at": "2026-03-17T16:21:23Z",
          "last_comment_author": "mrdimidium"
        },
        {
          "number": 1177,
          "created_at": "2025-10-24T11:01:15Z",
          "last_comment_at": "2025-10-27T14:45:44Z",
          "last_comment_author": "superphao"
        },
        {
          "number": 1179,
          "created_at": "2025-10-25T19:17:50Z",
          "last_comment_at": "2025-10-27T22:52:50Z",
          "last_comment_author": "mrdimidium"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/lightpanda-io/browser",
    "host": "github.com",
    "name": "browser",
    "owner": "lightpanda-io"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 77,
      "inputs": {
        "security": 67,
        "vitality": 95,
        "community": 84,
        "governance": 70,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 95,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "commits_last_year": 5823,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 51
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "51/52 weeks with commits",
                "points": 35.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 51
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "5823 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 5823
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 18,
              "latest_release_tag": "0.3.5",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 13.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "18 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~13.9 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 13.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 84,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "excellent",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 96,
            "inputs": {
              "forks": 1430,
              "stars": 32085,
              "watchers": 84,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "32,085 stars",
                "points": 60,
                "status": "met",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 32085
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1,430 forks",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1430
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "84 watchers",
                "points": 10.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 84
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (AGPL-3.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "AGPL-3.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 70,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 56,
              "top_contributor_share": 0.402
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 40% of commits",
                "points": 13.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 40
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "56 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 56
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 13 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "merged_prs": 2327,
              "open_issues": 70,
              "closed_issues": 412,
              "issue_closed_ratio": 0.855,
              "closed_unmerged_prs": 196
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "86% of issues closed",
                "points": 40,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 86
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "2327/2523 decided PRs merged",
                "points": 35.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 2327,
                      "decided": 2523
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 9/13 approved changesets -- score normalized to 6",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "followers": 361,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "lightpanda-io",
              "public_repos": 32,
              "account_age_days": 1031
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "361 followers of lightpanda-io",
                "points": 18.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 361,
                      "login": "lightpanda-io"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "32 public repos, account ~2 yr old",
                "points": 16.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 32
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "9 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "browser",
                "cdp",
                "headless",
                "playwright",
                "puppeteer",
                "zig",
                "browser-automation",
                "lightpanda"
              ],
              "has_wiki": false,
              "homepage": "https://lightpanda.io",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://lightpanda.io",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 67,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 9/13 approved changesets -- score normalized to 6",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 13 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 6",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 78 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 78
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 78,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 78,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.8,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 1174
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "80 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 80,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_nix": true,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [
                "src/html5ever/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, Nix, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, Nix, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 7,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Zig",
              "largest_source_bytes": 28947,
              "source_files_sampled": 74,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Zig without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Zig"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/74 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 74,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch crates package 'litefetch-html5ever' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T08:51:06.821777Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/lightpanda-io/browser.svg",
  "full_name": "lightpanda-io/browser",
  "license_state": "standard",
  "license_spdx": "AGPL-3.0"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计.