公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 11:30 UTC
lutaml / moxml
Unified interface for multiple XML libraries
lutaml/moxml 的健康指数为 100 分中的 63 分，处于「中等」区间。 其得分最高的类别是Vitality（81/100），最低的是Community & Adoption（35/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
63
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
63
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| RubyGems | moxml | 0.1.26 | - | 26 | 0 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
81
开发活跃度
76良好
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 11.8/36 | 提交节奏 — 52 周中有 17 周有提交 |
| 18/18 | 提交量 — 最近一年 172 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 172 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 17 |
发布纪律
88优秀
评分方式
| 16.2/27 | 有发布版本 — 26 个版本标签（无 GitHub 发布版本） |
| 36/36 | 发布时效 — 最近一次发布版本于 0 天前 |
| 27/27 | 发布节奏 — 约每 9.9 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 26 |
| latest_release_tag | v0.1.26 |
| releases_from_tags | 是 |
| days_since_latest_release | 0 |
| mean_days_between_releases | 9.9 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
35
流行度与采用
6危急
评分方式
| 0/60 | 星标 — 2 个星标 |
| 2.5/25 | 复刻 — 3 个复刻 |
| 3.9/15 | 关注者 — 6 位关注者 |
所用输入
| forks | 3 |
| stars | 2 |
| watchers | 6 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
44存在风险
评分方式
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件，但不是可识别的许可证 |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
69中等
评分方式
| 55.3/80 | 累计下载量 — rubygems 合计历史 207,900 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | moxml |
| dependents | — |
| ecosystems | rubygems |
| total_downloads | 207,900 |
| monthly_downloads | — |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
64
维护者韧性（巴士系数）
35存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 8.2/22.5 | 提交分布 — 头号贡献者编写了 64% 的提交 |
| 8.1/13.5 | 贡献者广度 — 6 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 28 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 6 |
| top_contributor_share | 0.635 |
议题与 PR 响应能力
75良好
评分方式
| 38.5/46.8 | 议题解决 — 82% 的议题已关闭 |
| 36.2/38.3 | PR 接受 — 已裁定的 PR 中 52/55 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/16 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 52 |
| open_issues | 6 |
| closed_issues | 28 |
| issue_closed_ratio | 0.824 |
| closed_unmerged_prs | 3 |
所有权与托管责任
58中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 3.4/25 | 所有者影响力 — lutaml 有 2 位关注者 |
| 25/25 | 既往记录 — 66 个公开仓库，账户约 6 年 |
所用输入
| followers | 2 |
| owner_type | Organization |
| is_verified | — |
| owner_login | lutaml |
| public_repos | 66 |
| account_age_days | 2,223 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — rubygems 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 0 天前 |
| 20/20 | 版本历史 — 26 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | moxml |
| ecosystems | rubygems |
| any_deprecated | 否 |
| min_days_since_publish | 0 |
工程质量
基础的工程与文档实践是否到位？
80
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 6 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .rubocop.yml |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 5 out of 5 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
75良好
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
48
安全态势
48存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 5 out of 5 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/16 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 28 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.8 |
已排除计分（无数据或不适用）：packaging, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
40
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 100 次人类提交中有 78 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.78 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
验证循环（构建 / 测试 / 类型检查）
35存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .rubocop.yml |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 2/10 | 已体现的代理实践 — 最近 100 次提交中有 1 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0.01 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
55中等
评分方式
| 0/45 | 可类型检查的代码 — Ruby，未配置类型检查 |
| 54.8/55 | 可控的文件大小 — 采样的 299 个源文件中有 1 个超过 60KB |
所用输入
| primary_language | Ruby |
| largest_source_bytes | 60,594 |
| source_files_sampled | 299 |
| oversized_source_files | 1 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
2GitHub 星标
6贡献者
172最近 12 个月提交数
0距最近推送天数
26发布版本数
1巴士系数（bus factor）
6开放议题
RubyGems软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
更多细节
Star 与 Fork 历史 0 ★ / 3 ⇿
0Star
3Fork
18发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 0修订 18
每个点涵盖 2 天。
OpenSSF Scorecard 4.8 / 10
4.8综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 5 out of 5 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/16 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 28 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 23
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| RubyGems | benchmark | — | Gemfile |
| RubyGems | benchmark-ips | — | Gemfile |
| RubyGems | get_process_mem | — | Gemfile |
| RubyGems | libxml-ruby | ~> 5.0 | Gemfile |
| RubyGems | nokogiri | ~> 1.18 | Gemfile |
| RubyGems | openssl | ~> 3.0 | Gemfile |
| RubyGems | ox | ~> 2.14 | Gemfile |
| RubyGems | rake | — | Gemfile |
| RubyGems | rexml | — | Gemfile |
| RubyGems | oga | — | Gemfile |
| RubyGems | ruby-ll | — | Gemfile |
| RubyGems | rspec | — | Gemfile |
| RubyGems | rubocop | — | Gemfile |
| RubyGems | rubocop-performance | — | Gemfile |
| RubyGems | rubocop-rake | — | Gemfile |
| RubyGems | rubocop-rspec | — | Gemfile |
| RubyGems | simplecov | — | Gemfile |
| RubyGems | stackprof | — | Gemfile |
| RubyGems | tempfile | — | Gemfile |
| RubyGems | sys-proctable | — | Gemfile |
| RubyGems | opal | ~> 1.8 | Gemfile |
| RubyGems | opal-rspec | ~> 1.0 | Gemfile |
| RubyGems | opal-sprockets | — | Gemfile |
全部依赖 28
来自 GitHub 依赖图的完整解析依赖集合：22 个直接依赖与 6 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| RubyGems | benchmark | — | 直接 |
| RubyGems | benchmark-ips | — | 直接 |
| RubyGems | get_process_mem | — | 直接 |
| RubyGems | libxml-ruby | — | 直接 |
| RubyGems | nokogiri | — | 直接 |
| RubyGems | oga | — | 直接 |
| RubyGems | opal | — | 直接 |
| RubyGems | opal-rspec | — | 直接 |
| RubyGems | opal-sprockets | — | 直接 |
| RubyGems | openssl | — | 直接 |
| RubyGems | ox | — | 直接 |
| RubyGems | rake | — | 直接 |
| RubyGems | rexml | — | 直接 |
| RubyGems | rspec | — | 直接 |
| RubyGems | rubocop | — | 直接 |
| RubyGems | rubocop-performance | — | 直接 |
| RubyGems | rubocop-rake | — | 直接 |
| RubyGems | rubocop-rspec | — | 直接 |
| RubyGems | ruby-ll | — | 直接 |
| RubyGems | simplecov | — | 直接 |
| RubyGems | stackprof | — | 直接 |
| RubyGems | tempfile | — | 直接 |
| RubyGems | asciidoctor | — | 间接 |
| RubyGems | jekyll | — | 间接 |
| RubyGems | jekyll-asciidoc | — | 间接 |
| RubyGems | jekyll-seo-tag | — | 间接 |
| RubyGems | jekyll-sitemap | — | 间接 |
| RubyGems | just-the-docs | — | 间接 |
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 46166,
"has_wiki": true,
"homepage": null,
"languages": {
"Ruby": 1203748,
"Shell": 131
},
"pushed_at": "2026-07-22T11:21:45Z",
"created_at": "2024-10-29T12:08:45Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T11:21:50Z",
"description": "Unified interface for multiple XML libraries ",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": null,
"name": "LutaML",
"type": "Organization",
"login": "lutaml",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/67158171?v=4",
"created_at": "2020-06-19T14:49:52Z",
"is_verified": null,
"public_repos": 66,
"account_age_days": 2223
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.26",
"kind": "patch",
"published_at": "2026-07-22T11:21:42Z"
},
{
"tag": "v0.1.25",
"kind": "patch",
"published_at": "2026-06-26T14:24:19Z"
},
{
"tag": "v0.1.24",
"kind": "patch",
"published_at": "2026-06-02T07:15:21Z"
},
{
"tag": "v0.1.23",
"kind": "patch",
"published_at": "2026-06-01T03:32:58Z"
},
{
"tag": "v0.1.22",
"kind": "patch",
"published_at": "2026-05-25T15:43:47Z"
},
{
"tag": "v0.1.21",
"kind": "patch",
"published_at": "2026-05-25T11:42:04Z"
},
{
"tag": "v0.1.20",
"kind": "patch",
"published_at": "2026-05-03T13:28:32Z"
},
{
"tag": "v0.1.19",
"kind": "patch",
"published_at": "2026-05-01T10:56:27Z"
},
{
"tag": "v0.1.18",
"kind": "patch",
"published_at": "2026-04-27T01:45:18Z"
},
{
"tag": "v0.1.17",
"kind": "patch",
"published_at": "2026-04-24T07:17:59Z"
},
{
"tag": "v0.1.16",
"kind": "patch",
"published_at": "2026-04-22T23:01:16Z"
},
{
"tag": "v0.1.15",
"kind": "patch",
"published_at": "2026-04-22T01:49:29Z"
},
{
"tag": "v0.1.14",
"kind": "patch",
"published_at": "2026-04-20T12:06:20Z"
},
{
"tag": "v0.1.13",
"kind": "patch",
"published_at": "2026-04-20T07:44:59Z"
},
{
"tag": "v0.1.12",
"kind": "patch",
"published_at": "2026-04-16T06:29:24Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2026-04-16T01:44:58Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2025-11-26T04:38:34Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2025-11-24T23:12:55Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2025-11-24T07:13:12Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2025-08-15T08:01:10Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2025-07-29T05:29:41Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2025-05-12T07:55:10Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-02-26T08:24:42Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2025-02-07T04:15:15Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2025-01-13T02:56:37Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-10-30T10:35:59Z"
}
],
"recent_commits": [
{
"oid": "948532a670fc7218d22dee216f316348ee733a9f",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.26",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-07-22T11:21:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a58f9b0b5e54ac5beb22555fa46d42137d596d4e",
"body": "…c paths\n\nCI rubocop caught offenses missed by local -a (rubocop_todo config\ndiffers between local and CI). Fixes:\n\n- Naming/VariableNumber: :inclusive_10 -> :inclusive10, etc.\n- Naming/MethodParameterName: equivalent?(a, b) -> equivalent?(left, right)\n- Metrics/ParameterLists: build_signature(**opts) instead of 10 kwargs\n- RSpec/FilePath: models_spec.rb -> model_spec.rb\n- Hash alignment in canonicalize_exclusive\n\n153 specs, 0 failures, 0 rubocop offenses (237 files inspected).",
"is_bot": false,
"headline": "fix(c14n): rubocop CI failures - normalcase symbols, param names, spe…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23bf09b4c5a264696e6209004cd8d1023729ae57",
"body": "…ge cases\n\nAddresses the critical regression where Inclusive10 was using the\nmoxml-native Writer walker instead of the canon-ported Processor\npipeline. The canon port was dead code until now.\n\nFixes:\n- Inclusive10 now delegates to Processor + DataModel (the canon port\n that was previously unused). \n[…]\n, document-level comments/PIs (known limitation noted)\n- spec/moxml/c14n/xml_attributes_spec.rb — xml:lang, xml:space, xml:id,\n xml:base, attribute sorting\n\n153 specs, 0 failures, 0 rubocop offenses.",
"is_bot": false,
"headline": "feat(c14n): public API + equivalent? + Inclusive10 via Processor + ed…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b53ac4813be6905bf86b7310df642791772fb160",
"body": "Adds 17 specs covering gaps identified in the audit (TODO.complete/20):\n\n- Malformed Signature elements (no Signature, invalid base64, empty\n SignatureValue, unknown algorithm URI)\n- HMAC truncation at exact boundaries (minimum, just above, just below)\n- KeyExtractor failure modes (nil KeyInfo, emp\n[…]\ntion (library returns per-reference\n results; application must check URI)\n- Adapter portability (sign with one context, verify with another)\n\n113 specs total (was 96), 0 failures, 0 rubocop offenses.",
"is_bot": false,
"headline": "test(signature): edge cases, defensive behavior, attack scenarios",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2851158b41dc2fa367e3ae70e61aa83d1d216b11",
"body": "Audit of feat/xml-signature identified critical bugs, architectural smells,\nand missing documentation. This commit addresses the high-severity\nfindings and adds comprehensive docs.\n\nCritical fixes:\n- CanonicalizationBase#transform no longer uses global Moxml.parse;\n uses the context: passed by Tran\n[…]\non (intentional but undocumented)\n- H6 split AlgorithmMethod into CanonicalizationMethod + SignatureMethod\n- M1/M2/M3 DRY cleanups\n- L1-L4 minor improvements\n\n96 specs, 0 failures, 0 rubocop offenses.",
"is_bot": false,
"headline": "refactor(signature): audit fixes + documentation",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e30e4173d4b5b2ccd7ff0fc4cdc8493b00c8bd6",
"body": "Addresses the architecture question raised in review: \"Did you move the\nC14n code from canon over? because their code is known to be mature and\ncomplete.\"\n\nThe earlier \"promote to top-level\" commit only renamed my own (less\nmature) implementation. This commit does the proper port from canon.\n\nPorted\n[…]\nproduced fixtures still verify\nbyte-exact after the port (sign2-result.xml, sign3-result.xml).\n\n96 specs, 0 failures, 0 rubocop offenses.\nFull existing suite (1896 examples, 174 pending) still passes.",
"is_bot": false,
"headline": "refactor(c14n): port canon mature C14N implementation into Moxml::C14n",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09b959da7147c0b61708eda548af5c26fced3ff2",
"body": "Addresses the architecture question raised in review: \"Don't moxml\n(or ../canon) already implement C14n?\"\n\nRight answer was to promote C14N out of the signature sub-namespace\ninto a top-level moxml feature, so it can serve any consumer (signature,\ncanon sibling project, future tooling) instead of be\n[…]\nunity\n (Nokogiri has native C14N via libxml2; other adapters would fall\n back to pure-Ruby).\n\n96 specs, 0 failures, 0 rubocop offenses. Full existing suite (1896\nexamples, 174 pending) still passes.",
"is_bot": false,
"headline": "refactor(signature): promote C14N to moxml top-level; drop XPath Filter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3a0858db94febaa52413511197e93e329550c0ca",
"body": "… extraction\n\nBuilds on PR #93's foundation with the major pieces needed for\ncross-verification against libxmlsec1-produced signatures.\n\nC14N correctness (the load-bearing fix):\n- exc-c14n apex now renders visibly-used namespaces including the\n default namespace (was missing — broke byte-exact cano\n[…]\n X509Certificate) auto-verifies\n with no explicit key — extracted from the certificate.\n\n99 specs (was 67 in PR #93), 0 failures, 0 rubocop offenses.\nFull existing suite (1896 examples) still passes.",
"is_bot": false,
"headline": "feat(signature): inclusive C14N + ECDSA/DSA + XPath Filter + auto key…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6016c664591f118417c64152f2759deb508a07e7",
"body": "Add an XML-implementation-agnostic W3C XML Signature (xmldsig-core-1.1)\nprocessing module under Moxml::Signature. All XML operations flow\nthrough the moxml Document/Element API; no adapter (Nokogiri, Oga, REXML,\nOx, LibXML) is touched directly.\n\nFoundation scope (this PR):\n\n- Algorithm registry (OCP\n[…]\nted in\nTODO.complete/ (00-architecture through 18-documentation). Local-only\nper project convention (TODO* gitignored).\n\n67 specs, 0 rubocop offenses. Full existing suite (1896 examples)\nstill passes.",
"is_bot": false,
"headline": "feat(signature): add W3C XML Signature foundation",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-07-22T11:06:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b8fbce800c7f33fb28ff3d9cdaada3dfc26bf82",
"body": "The metanorma/ci reusable workflow gates rubygems publish behind a separate repository_dispatch (do-release) run when its gated input is true (the upstream default). moxml release.yml never passed gated, so every workflow_dispatch only bumped and tagged, requiring a follow-up do-release dispatch to \n[…]\n, tags, and publishes. Selecting gated=true preserves the conservative two-step path for low-confidence releases. repository_dispatch (do-release) is unaffected: upstream short-circuits on event_name.",
"is_bot": false,
"headline": "ci(release): default workflow_dispatch to one-step publish",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T23:48:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f37d4675a9e3fa5b50a14c8addc3ce0dd49b23e",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.25",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-06-26T14:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d32450f0a2645d53e221376f1e702ac30111b26b",
"body": "- Align hash literal keys/assignment in vendor:compile task\n- Add desc to spec:opal task alias and use new hash syntax\n- Replace select+is_a? with grep(Moxml::Element) in opal_oga_features_spec\n- Use double-quoted strings in opal_oga_features_spec\n- Replace match(/item/) with include('item') in node_functions_spec\n- Exclude opal_oga_adapter_spec and platform_spec from RSpec/SpecFilePathFormat",
"is_bot": false,
"headline": "style: clear remaining rubocop offenses",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3af958923e509902789a134eaac25392760e987",
"body": "Bundler does not always build native extensions for path-source gems\nduring 'bundle install'. Under CRuby this surfaces as a LoadError on\nrequire \"oga\" (which loads libll via ll/setup.rb).\n\nAdd a vendor:compile task that runs each fork's ext/c/extconf.rb and\ncopies the resulting .bundle into lib/. Wire it into rake.yml and all\nthree round-trip.yml jobs.",
"is_bot": false,
"headline": "ci: explicitly compile liboga/libll for path-source forks",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02ef21efe88650e5083184ce6ff6e7ec53314b65",
"body": "The previous guard only protected the top-level :spec task definition.\nThe nested namespace :spec block defines :unit, :adapter, :integration,\n:consistency, :examples, and :performance tasks via RSpec::Core::RakeTask,\nwhich still fails in CI before bundle install:\n\n NameError: uninitialized constant RSpec\n\nWrap the whole namespace in 'if defined?(RSpec)' so vendor:prepare\nloads cleanly with only rake + bundler available.",
"is_bot": false,
"headline": "ci: wrap spec task namespace in if defined?(RSpec) guard",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba735d04b4657ce74915bcbce957414583dbd44",
"body": "…file\n\nTwo follow-ups to the previous CI fix:\n\n1. Bump actions/checkout from v4 to v6 across rake, round-trip, and\n docs workflows. opal.yml already used v6.\n\n2. The Rakefile loads rspec/core/rake_task and rubocop/rake_task at\n top level. In CI, `rake vendor:prepare` runs BEFORE `bundle\n insta\n[…]\nror so vendor:prepare\n works in a bare environment. The :spec and :rubocop tasks are\n defined only when their gems are present, which matches the\n existing pattern used for opal/rspec/rake_task.",
"is_bot": false,
"headline": "ci: bump actions/checkout to v6; guard rspec/rubocop requires in Rake…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f31286c74fa98c849b1bc4e1991023155ad97d50",
"body": "PR #91 switched the Gemfile to path-source oga and ruby-ll forks. The\nopal workflow was updated at the same time, but rake.yml and\nround-trip.yml were not — they still use bundler-cache: true with a\nplain checkout, so bundle install fails with:\n Could not find gem 'oga' in source at `vendor/opal-og\n[…]\n\n gitignored lexer/parser outputs (.rb from ruby-ll, .c from ragel)\n that each fork's extconf.rb requires.\n* bundler-cache: false — path-source gems cannot be cached before\n vendor:prepare has run.",
"is_bot": false,
"headline": "ci: checkout submodules + run vendor:prepare in rake and round-trip",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d6733617e75c4f14d1e2691896cf93f65ef4862",
"body": "The existing Opal coverage exercised the adapter contract and a small\nsmoke set (parse, serialize, single entity decode). The following\nfeature areas had no Opal coverage and could regress silently:\n\n* Builder DSL — the block form, method_missing form, trailing-underscore\n tag stripping, and namesp\n[…]\ns' `Moxml.with_config` around hooks cannot flip the adapter\nunder test. Under CRuby the file is a no-op (`if: RUBY_ENGINE == \"opal\"`).\n\nOpal suite now: 91 examples, 0 failures, 1 pending (was 70/0/1).",
"is_bot": false,
"headline": "test: add opal_oga_features_spec.rb for builder/declaration/round-trip",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "640813f97e21c8a0be82d467f3cc803055d9a738",
"body": "Moxml's default Opal adapter is :oga (set in af93f71), but upstream\noga and ruby-ll ship no pure-Ruby fallbacks for their C extensions\n(liboga's XML lexer, libll's parser driver). Without those fallbacks\nthe adapter cannot run on Opal at all.\n\nThis wires in the Opal-compatible forks maintained at lu\n[…]\nemfile wiring, Opal\n load-path configuration, and how to verify via rake spec:opal.\n\nVerified:\n* CRuby suite: 3786 examples, 0 failures, 194 pending.\n* Opal suite: 70 examples, 0 failures, 1 pending.",
"is_bot": false,
"headline": "build: vendor lutaml/opal-oga and lutaml/opal-ruby-ll forks",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-26T14:22:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "11eebfc9fcf990ea36f87f6ad0d1bf7e75eade62",
"body": "spec_helper.rb referenced :oga / :nokogiri by literal symbol, so\nupdating the default in Moxml::Config required three edits instead\nof one. Replace the literals with Moxml::Config::OPAL_DEFAULT_ADAPTER\nand DEFAULT_ADAPTER — Config is now the single source of truth.\n\nAdd two invariant guards so a fut\n[…]\nsolidate the six top-level RSpec.describe blocks in platform_spec\ninto a single top-level describe with nested describe \".method\" /\ndescribe \"CONSTANT\" sub-groups, per the one-top-level-describe rule.",
"is_bot": false,
"headline": "test: derive defaults from Config constants; consolidate platform_spec",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-25T11:31:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dba3bd7477ab03b64ad398fc2e98cce6045c9479",
"body": "Commit d7dcebc reverted PR #71's :oga default to :rexml and shipped a\npile of REXML-on-Opal compat shims to make it work. Those shims are\nreactive patches for an unsustainable direction — every new REXML\nrelease risks introducing another regex or string API that doesn't\ntranspile to JavaScript.\n\nOga\n[…]\n flag groups).\n\n:rexml remains in OPAL_AVAILABLE_ADAPTERS so anyone who explicitly\nopts into Moxml.new(:rexml) under Opal can still use it — the compat\noverrides stay in place for that path.\n\nRefs #89",
"is_bot": false,
"headline": "fix: restore :oga as the Opal default adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-25T11:31:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16bc325281147a1ed6de2e714e6b8bb6ac59bab2",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.24",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-06-02T07:15:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99094cdf450d9d96f40db193ad2a6f5151d66197",
"body": "…dling\n\n- Replace all require_relative with autoload throughout library\n- Eliminate respond_to? in favor of is_a? type checks (~30 instances)\n- Replace send-based dispatch with explicit case statements\n- Fix with_config to use public API instead of instance_variable_set\n- Fix Declaration#remove to p\n[…]\napper tag\n- Clean up XPath engine: remove dead code, add on_neq handler\n- Ensure Opal loads autoloaded dependencies explicitly in Rakefile\n- Add specs for all new features and fix existing test issues",
"is_bot": false,
"headline": "refactor: autoload, eliminate forbidden patterns, fix declaration han…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-02T07:13:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37eae10eb819e7ac7679cd763d3b2e58ff09be52",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.23",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-06-01T03:32:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9084067742a0a77b7a9a960dd4a4affae98bda1",
"body": ".bundle/config was accidentally re-tracked in 4ad3a2a (rubocop\nauto-correct). It should not be committed because CI steps\n(gh-rubygems-setup-action, ruby/setup-ruby) modify it at runtime,\ncausing gem bump to abort with 'Uncommitted changes found.'",
"is_bot": false,
"headline": "fix: stop tracking .bundle/config",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-06-01T03:30:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cc5b11ec2a3b1c7525986fbc5231d10053c62e5",
"body": "…rmat\n\nGenerate declaration string directly instead of relying on Oga's native\nto_xml which adds a trailing space before ?>.",
"is_bot": false,
"headline": "fix: Oga declaration serialization — no trailing space, consistent fo…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "752b90c9ed34e175d4c6a0954f409a49b8d8f73e",
"body": "Simplify serialize to output declaration from attachment first, then\ndoctype, then children. Eliminates ordering issues where declaration\nappeared after root element.",
"is_bot": false,
"headline": "fix: Oga adapter stores declaration in attachments only, no child node",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:23:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b26fbec823bc97b8fc32fcf80b95f71cf176339f",
"body": "…hild\n\nPrepend declaration from attachment data during serialize instead of\nrelying on PI child node (which appeared after root element).",
"is_bot": false,
"headline": "fix: Nokogiri adapter stores declaration in attachments only, no PI c…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:13:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdaab7f2a72fc39e52cb43d92ec6d6c952aeec1f",
"body": "- Document#add_child always uses adapter.add_child for declarations\n (not add_previous_sibling), so adapter-specific handling fires\n- Nokogiri: suppress native declaration when custom one is stored\n in attachments (prevents duplicates)\n- Ox: don't add declaration PI as child node; attrs stored in document\n (prevents duplicate PI in output)",
"is_bot": false,
"headline": "fix: declaration handling across adapters",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T16:06:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87fd875d67e1f8b098bb20c994df2ccf5c878028",
"body": "Oga::XML::NodeSet#index does not accept a block — use each_with_index\nto find the root element position.",
"is_bot": false,
"headline": "fix: use each_with_index for Oga NodeSet compatibility",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:52:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b5f540b343eeb90696484cd512df73eccfc29a5",
"body": "Parallel fix to Ox adapter — ensures doctype appears before root\nin serialized output.",
"is_bot": false,
"headline": "fix: position doctype before root element in Oga adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6934ae2a2f4607265903e6fec3a78931955f565",
"body": "- create_native_doctype now uses SYSTEM format when public_id is nil\n- add_child positions doctype before root element in document\n- Fixes doctype output ordering for Ox adapter",
"is_bot": false,
"headline": "fix: Ox doctype creation and positioning",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf8b00235757abe27fb83c4edfa1c83a3c816703",
"body": "- Ox adapter set_root now replaces only the root element, not all children\n- Document#add_child now allows Doctype nodes after root element exists\n- Fixes doctype serialization for Ox adapter",
"is_bot": false,
"headline": "fix: preserve doctype when setting root element in Ox adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e387cef3d61277106645c86b6005d53e4ec184f",
"body": null,
"is_bot": false,
"headline": "feat: add public preprocess_entities and restore_entities API",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T15:17:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ad3a2a9c83054a94086cc7c89cbb851437cde14",
"body": "Auto-corrected 785 offenses, 0 remaining. Updated .rubocop_todo.yml\nto reflect current codebase state.",
"is_bot": false,
"headline": "style: rubocop -A --auto-gen-config across entire repo",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T10:12:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74a5f4144d4adafb6fa079aa577d5bca25b96ada",
"body": "- Config validation specs: accepts LF/CRLF, rejects nil/invalid/bare-CR/empty\n- New shared example 'Moxml Line Ending' exercised by all 6 adapters:\n LF default, CRLF config, per-call override, LF override wins,\n idempotent re-serialization, element structure round-trip\n- Remove duplicate line ending specs from node_spec.rb (now covered\n by cross-adapter shared examples)",
"is_bot": false,
"headline": "spec: add line ending validation specs and cross-adapter shared examples",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T09:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba56f9b94394128b4d1b21e64a35a5eb1b3b653d",
"body": "…nd defensive conversion\n\n- Add VALID_LINE_ENDINGS constant and validated setter to Config\n (rejects nil, arbitrary strings, bare CR — prevents crashes and\n corrupted output)\n- Remove unused line_ending from Context#default_options (parse path\n — no adapter reads this option; line_ending is serialization-only)\n- Use \\r?\\n regex in apply_line_ending for idempotent conversion\n (prevents double-conversion if adapter ever produces CRLF)\n- Update entity_registry_opal_data.rb comment header",
"is_bot": false,
"headline": "fix: harden line ending support with validation, dead code removal, a…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-29T09:57:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3905b34d92d85ad95496229f032a27c26ac6cf7a",
"body": "Add default_line_ending config to Moxml::Config with LINE_ENDING_LF and\nLINE_ENDING_CRLF constants. Node#to_xml applies the configured line\nending when serializing to XML. Context threads line_ending through\ndefault_options. Specs cover default LF, config CRLF, per-call override,\nand identity cases.",
"is_bot": false,
"headline": "Add configurable line ending support (LF/CRLF) for XML serialization",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-28T15:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a56a6c39eb30b62cfa9a2ff1d893a60ae77349eb",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.22",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-25T15:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7dcebcd155e44f5e018671a095cbb5490805d8d",
"body": "Architecture audit:\n- Fix typos, DRY violations, OCP violations, deprecation warnings\n- Resolve ReDoS polynomial regex in add_newlines_to_xml\n\nOpal (Ruby-to-JavaScript) compatibility:\n- Add REXML compat overrides for Opal runtime (String, Encoding, StringIO)\n- Override baseparser.rb with JS-compatib\n[…]\n Add opal_smoke_spec.rb covering parse, serialize, build, CDATA, comments, PIs, namespaces\n- Add opal_spec.rb for NativeAttachment sidecar registry\n- Add platform_spec.rb for Opal adapter availability",
"is_bot": false,
"headline": "fix: architecture audit improvements and Opal CI support",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-25T15:42:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6717650724c83b0dfbe4398369b4cc1b12b2d018",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.21",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-25T11:42:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5335aac7848d6260d4af44d3ea006cfabdff96f7",
"body": "* fix performance hotspots for libxml\n\n* use native parser\n\n* code refactoring and increase threshold\n\n* reduce threshold for ci",
"is_bot": false,
"headline": "Fixed performance issues for libxml (#86)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-05-25T11:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b4380f475b56e16cdb7c63478a25811b44709ae",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.20",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-03T13:28:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d87c4f1ae5f14a19b1f309ca2ef4b863556b2435",
"body": "…alization\n\n- Use escape_xml_text() in serialize early return for CustomizedOx::Text\n to prevent emitting unescaped < > & characters in XML output\n- Remove alias_method :inspect, :to_s from Moxml::Text and\n CustomizedOx::Text to preserve diagnostic debugging output\n- Use value accessor instead of \n[…]\nlue instance variable access\n in CustomizedOx::Text#to_s\n- Add tests for XML escaping, to_s cross-adapter consistency\n- Document Text#to_s in node API consistency guide\n- Rubocop -A --auto-gen-config",
"is_bot": false,
"headline": "fix(:ox adapter): proper XML escaping and encapsulation for Text seri…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-05-03T13:26:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0758daf2d2ce1617cca84bd38b2e9e436f4dc2bf",
"body": "Under the :ox adapter, Moxml::Text#to_xml emitted an Ox `mode=\"object\"`\nmarshalling blob (`<o c=\"…CustomizedOx::Text\"><s a=\"@value\">…</s>…</o>`)\ninstead of the text value. Moxml::Text#to_s and string interpolation\nreturned `\"#<Moxml::Text:0xaddr>\"`. The :nokogiri adapter is unaffected.\n\nCause: Moxml\n[…]\nAdapter::CustomizedOx::Text: same #to_s/#inspect overrides\n for direct interpolation of the native node.\n\nRefs: lutaml/moxml#81\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(:ox adapter): emit Text node value, not Ox object marshalling",
"author_name": "Nick Nicholas",
"author_login": "opoudjis",
"committed_at": "2026-05-03T13:26:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce08eae2a38d4ba0a2c71f5d5bfbc8b5b119ba78",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.19",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-05-01T10:56:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0af82499d67dcccc3f3c4fa39d673340f2b4102b",
"body": null,
"is_bot": false,
"headline": "docs: document runtime default adapter detection in README",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-30T07:51:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edd6996828b92ad67020dcb45232681c05b3f717",
"body": "The previous commit (e94961e) introduced runtime adapter detection but\nused ||= for memoization in Config.default_adapter. This meant that\nonce the class-level @default_adapter was set (even implicitly by a\nfirst call), it could never revert to runtime detection. Changing to ||\npreserves explicit ov\n[…]\nes (from the recent whitespace preservation\n fix in aa58888)\n- Pass indent: 0 in lazy_parse round-trip test for consistent output\n- Adjust libxml benchmark thresholds to reflect actual measured times",
"is_bot": false,
"headline": "fix: correct default_adapter memoization and clean up tests",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-30T07:51:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a8895a264c798360a3896350077e92bce56a53b",
"body": null,
"is_bot": false,
"headline": "test native attachment backends by source structure",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e548db340aa0f44f8b359daa55e59dccbae3bd2",
"body": null,
"is_bot": false,
"headline": "copilot suggested change",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1a3fbe16f7fe856b05a6d81e9bed938db7bfa16",
"body": null,
"is_bot": false,
"headline": "Refactor NativeAttachment runtime backend loading",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df0f0bdd32637d2d739b8230b044cabebc188cdd",
"body": null,
"is_bot": false,
"headline": "test: OPAL specific changes",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99d0d527a1112a6386c12cce8b78527d370100c5",
"body": null,
"is_bot": false,
"headline": "refactor: load Opal-specific NativeAttachment via runtime compatibility",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-30T03:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0190d733802c78f718fac550bf32940f1cfdffa",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.18",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-27T01:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e94961eb95a77d16ffc802da14980bf1b47dbc5b",
"body": null,
"is_bot": false,
"headline": "Detect default XML adapter by runtime and availability",
"author_name": "suleman-uzair",
"author_login": null,
"committed_at": "2026-04-24T12:47:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa588884adf15dedba6adf278bd265b8d963c5c4",
"body": "Remove whitespace-only text node filtering from Nokogiri, REXML, OGA,\nand LibXML adapters children() methods. Whitespace text nodes between\nelements (e.g. the space in FigureA.1) were being silently discarded,\ncausing content loss.\n\nFixes OGA TypeError (NodeSet to Array conversion) and adds document-level\nwhitespace filtering for OGA to match other adapters. Updates affected\nintegration tests for the new behavior and adds dedicated whitespace\npreservation tests.",
"is_bot": false,
"headline": "fix: preserve whitespace text nodes in children() across adapters",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-24T07:28:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82f1a2bc8725b030de0e562895928fd99936b849",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.17",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-24T07:17:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68a76a8965b3bdbe77afe365bbf2c3d44ea4917d",
"body": "* add consistent in_scope_namespaces api for all adapters",
"is_bot": false,
"headline": "Added consistent `in_scope_namespaces` API for all adapters (#75)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-23T15:00:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d84a822bb3b7ff69e77a33110d6e8e96d3c7fba",
"body": "* fix xml entities handling for all adapters",
"is_bot": false,
"headline": "Fix: XML entities handling for all adapters (#70)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-23T11:18:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22b91d6e70c6b6b0784a58cfcd8e5b67f76b1b13",
"body": "- Add EntityReference node tests across 4 adapters (nokogiri, oga, ox, rexml)\n covering creation, serialization, tree integration, and name validation\n- Add entity restoration integration tests for standard and non-standard\n entities via DocumentBuilder (oga, rexml)\n- Add EntityRegistry tests for standard_entity?, should_restore?,\n and restorable_codepoints methods\n- Add builder DSL entity_reference test\n- Add scripts/ to .gitignore\n- Regenerate .rubocop_todo.yml",
"is_bot": false,
"headline": "feat: add entity reference test coverage and cleanup hygiene",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-23T09:38:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530a3f5e7fc645cef835cc22238d0d656e4ec017",
"body": "- Add @* attribute wildcard support in XPath parser (//book/@*)\n- Fix //* element wildcard count by using node() in // expansion\n per XPath spec, and including document node in descendant-or-self\n- Fix CDATA ]]> escaping in Ox/HeadedOx serialization (splits across\n CDATA sections per XML spec)\n- O\n[…]\nA marker scans\n- Unskip 11 tests: CDATA escaping (Ox+HeadedOx), XPath wildcards,\n text content from nested XPath, wildcard element counting\n- Add utility scripts (format_xml.rb, pretty_format_xml.rb)",
"is_bot": false,
"headline": "feat: XPath @/* wildcard, CDATA ]]> escaping, and test unskips",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-23T02:35:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "00deb14cadb9052253dd607a3ae90b8d36c8b892",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.16",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-22T23:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb24a61accb36009f3e138c7c3da4209a0893575",
"body": "* add method_missing dsl to builder\n\n* remove trailing underscores just like nokogiri dsl",
"is_bot": false,
"headline": "add method_missing dsl to builder (#67)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-22T14:19:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb59f6e5884822da0c4f1a21435d5e940b794330",
"body": "- Fix HeadedOx xpath() to return native arrays matching adapter contract,\n eliminating NodeSet double-wrapping that broke nested XPath queries\n- Add entity_restoration_mode config (:strict/:lenient) for entity handling\n- Fix has_call_node? in XPath compiler to check ast.value for function names\n- Fix round-trip test element traversal to use type-based filtering\n- Add xmllint-based fixture validation rake task\n- Enable 7 previously-skipped tests (HeadedOx nested XPath, position/last, id())",
"is_bot": false,
"headline": "fix: resolve HeadedOx double-wrapping and multiple TODO items",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T12:29:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0583d3e841c69102cb5c0c6b4b87524c34cdd7b",
"body": "… registry\n\nIntroduce NativeAttachment, a GC-safe sidecar registry that stores\nMoxml state on native adapter objects via object_id keys with finalizer\ncleanup. This replaces the anti-pattern of using instance_variable_set/get\non foreign library objects (Nokogiri, REXML, Oga, Ox, LibXML nodes).\n\nKey \n[…]\nwriter :parent_node replacing ivar access across classes\n- Full EntityReference integration tests passing across all adapters\n- Doc link updates (HEADED_OX_LIMITATIONS.md → headed-ox-limitations.adoc)",
"is_bot": false,
"headline": "feat: replace instance_variable_get/set with NativeAttachment sidecar…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T12:29:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8492fab1aa7a1cd125f59363da6f0eaf8083c172",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.15",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-22T01:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "496a8337a02e2433e5d4484c8c9eeb60d3b72c90",
"body": null,
"is_bot": false,
"headline": "chore: rubocop",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b428399dd2fbdf77d1a45c82ac742eebd18214a",
"body": null,
"is_bot": false,
"headline": "fix: correct type checks for Declaration/Instruct/Attribute wrappers",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebaf2ce1438332e5e8e57fae52ca5c4dcfdcda18",
"body": "Replace duck-typed respond_to? guards with is_a? type checks for\nclearer intent and better type safety. LibXML adapter uses\n::LibXML::XML::Node checks (all node types share this base class),\nOga adapter accounts for Document not inheriting from Node, and\nOx adapter checks against ::Ox::Element/Node/Instruct directly.\n\nAlso includes rubocop -A --auto-gen-config formatting fixes.",
"is_bot": false,
"headline": "refactor: replace respond_to? with explicit type checks across adapters",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "580187fd6e3b410bea07afe8ee9daba0531c1607",
"body": "…en restoration\n\n- Add EntityReference wrapper classes for Ox, REXML, and LibXML adapters\n- Ox: dual-path serialization (fast Ox.dump vs custom walker when EntityReferences present)\n- Oga: marker-tagged text nodes with @moxml_entity_name for EntityReference detection\n- REXML: instance variable stora\n[…]\nrestorable_codepoints\n- DocumentBuilder: model-driven restoration with Set-based O(1) codepoint guard and buffered text\n- Refactor adapter requires to use autoload for all customized module namespaces",
"is_bot": false,
"headline": "feat: add EntityReference support across all adapters with model-driv…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48b3f18db0d6de5a696b2a28199fd06c202900ab",
"body": null,
"is_bot": false,
"headline": "docs: update namespace_uri_mode references to namespace_validation_mode",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59de8bbe75a96a48c5822d11c6f2b20eff550005",
"body": "- Regenerate .rubocop_todo.yml\n- Auto-fix linting offenses (47 corrected)\n- Update README: rename namespace_uri_mode to namespace_validation_mode\n and document prefix validation behavior",
"is_bot": false,
"headline": "chore: rubocop -A --auto-gen-config and update docs",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf3e96b2aea49a8a602e61f341c5a9dbe931c1a4",
"body": "- Generalize namespace validation to cover both URI and prefix\n- In lenient mode, skip prefix validation (let underlying parser decide)\n- Rename NAMESPACE_URI_MODES to NAMESPACE_VALIDATION_MODES\n- Add specs for validate_prefix NCName compliance including dots",
"is_bot": false,
"headline": "refactor: rename namespace_uri_mode to namespace_validation_mode",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf049c160967bf848df19b6285dac64008c4b5db",
"body": "Covers valid prefixes with dots (e.g. abc_1.0, xmlns_1.0),\ndigits in prefixed positions, and rejection of invalid prefixes.",
"is_bot": false,
"headline": "spec: add validate_prefix tests for NCName compliance",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-22T01:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0614a8ab99d183f1513b5e69162ad085c4685611",
"body": "…EXML perf\n\n- NodeSet#[]: support negative indices (e.g. nodes[-1])\n- Attribute#remove: invalidate parent element attributes cache\n- Ox/HeadedOx: assign parent refs after parse, validate single root\n- REXML: use deep_clone instead of Marshal for Element duplication\n- Skip Nokogiri empty-namespace XPath test (known limitation)",
"is_bot": false,
"headline": "fix: NodeSet negative index, Attribute cache, Ox parent validation, R…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T11:35:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "346fb834e633dda6f216de7b05f441f51811038b",
"body": "XML NCName spec permits dots in namespace prefixes but the regex\nwas too restrictive, rejecting valid prefixes like xmlns_1.0.",
"is_bot": false,
"headline": "fix: allow dots in namespace prefix validation",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T09:28:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8164c9b2a9ffd486e9394a57550f7a75b8e98d4b",
"body": "- Fix Oga doctype SYSTEM/PUBLIC identifier mapping (Oga stores SYSTEM\n identifier in public_id, not system_id)\n- Add Builder#doc alias for document accessor\n- Add doctype parsing specs for all adapters",
"is_bot": false,
"headline": "fix: Oga doctype SYSTEM identifier mapping and Builder doc alias",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T03:05:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "757590405b8305ea94e0c054f0e6be92bb763608",
"body": "Replace DocumentBuilder (eager tree construction) with Document.new\n(lazy wrapping) in HeadedOx adapter, matching the Ox adapter approach.\nThe XPath engine already wraps nodes on-demand via Moxml::Node.wrap,\nso the eager DocumentBuilder was pure overhead.\n\nImpact on 100-element parse:\n Before: 1764\n[…]\nlity - nearly quadratic)\n After: 1001 allocations (2.0x scalability - linear)\n\nAlso tighten HeadedOx allocation guard thresholds from the bloated\nDocumentBuilder budgets to match Ox-level budgets.",
"is_bot": false,
"headline": "perf: migrate HeadedOx to lazy parse - 176x allocation reduction",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T02:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba265694c31f348d263276b8352cbcf89fd6cc50",
"body": "Add CI-gated allocation benchmarks covering Nokogiri, Ox, HeadedOx, and\nOGA adapters. These guards run in every CI build (no :performance tag)\nand enforce per-adapter allocation budgets for:\n\n- Parse allocations (100/50 element documents)\n- Cache hit verification (children, attributes, iteration)\n- \n[…]\non guard failure (allocation hotspots)\n- Extend lazy_parse, node_cache, node_set_cache specs to all adapters\n- Remove :performance tag from correctness tests (now run in CI)\n- Add stackprof to Gemfile",
"is_bot": false,
"headline": "test: add comprehensive cross-adapter allocation guards",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T02:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bebb68e7c1233072a617c1ad986d514781d2f521",
"body": "…caching\n\nTODOs 1-5 from the moxml performance plan:\n\n1. Lazy parse (TODO 1): Replace eager DocumentBuilder with\n Document.new(native, ctx). Nodes are wrapped on access, not during\n parse. ~36,640 allocations eliminated per 200-element doc.\n\n2. Cache Node#children (TODO 2): Memoize children Node\n[…]\nrs via\nNodeSet, propagate invalidation upward on remove/replace/sibling ops.\n\nAll adapters (Nokogiri, Ox, Oga, REXML) pass the shared contract tests.\n73 performance specs pass under RUN_PERFORMANCE=1.",
"is_bot": false,
"headline": "perf: eliminate ~40K allocations per XML parse via lazy wrapping and …",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-21T02:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e8259480dba45624e1f75bf9acc5879fadf7061",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.14",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-20T12:06:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4691d63c253beedf81a34a9c2d9185bb2015b83",
"body": "Co-authored-by: suleman-uzair <suleman@workytical.com>",
"is_bot": false,
"headline": "Fix Oga serialization buffers for Opal compatibility (#57)",
"author_name": "Suleman Uzair",
"author_login": "suleman-uzair",
"committed_at": "2026-04-20T11:01:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cf1c57926a0e800ff3087f578aefa58f5098a9c",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.13",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-20T07:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "582b3497084afb24246a310b5798759c56589270",
"body": "- Pass owner_doc to create_native_* methods so Nokogiri creates nodes\n in the target document instead of a fresh document, avoiding silent\n failures when reparenting nodes across documents\n- Add Element#in_scope_namespaces to return all namespaces visible at\n an element including inherited ones (wraps Nokogiri namespace_scopes)\n- Update all adapter signatures to accept optional owner_doc parameter",
"is_bot": false,
"headline": "feat: same-document node creation and in_scope_namespaces",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-20T07:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f296751c355831c817c3d85fbd27ef5b6ed28bb",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.12",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-16T06:29:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07bb30378f186f4df4470c4a3d06623200f18ba9",
"body": "Nokogiri's native inner_text correctly excludes XML comments, but\nMoxml's Nokogiri adapter was including comment content in inner_text.\nThis affected downstream libraries like lutaml-model where comment\ntext leaked into mixed content text nodes.\n\nFix: Use explicit reject { |c| c.element? || c.comment? } instead\nof node.children - node.element_children.\n\nIncludes integration specs for comment exclusion from inner_text.",
"is_bot": false,
"headline": "fix: exclude comment nodes from inner_text in Nokogiri adapter",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-16T04:46:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "609aa7618cf0d56a6f94fb0cdf4e89121602883e",
"body": null,
"is_bot": false,
"headline": "Bump moxml to 0.1.11",
"author_name": "github-actions",
"author_login": null,
"committed_at": "2026-04-16T01:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b125d046df873668f7d35df3339329ed9254d5bc",
"body": "* remove strict uri validation for namespace uri\n\n* add rfc3986 validation and specs from w3c\n\n* add lenient mode for xml namespace uri\n\n* add license and update docs",
"is_bot": false,
"headline": "remove strict uri validation for namespace uri (#55)",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-14T07:41:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0735faa98be2bb4403d4b5aecb3e2bf4fe8a10bd",
"body": "fix oga entities parsing and serializing",
"is_bot": false,
"headline": "Merge pull request #53 from lutaml/oga-entities-fix",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-10T07:30:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69c37594cde772be2aa88dcce7b146e249a716a1",
"body": null,
"is_bot": false,
"headline": "fix copilot comments",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-09T07:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2fa2f787ca2b97e2b228f9ba0ae5f498de562bf",
"body": null,
"is_bot": false,
"headline": "fix oga entities parsing and serializing",
"author_name": "HassanAkbar",
"author_login": "HassanAkbar",
"committed_at": "2026-04-09T06:34:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0995c0219015bf59e2cd5324a6492103dbe54a4",
"body": null,
"is_bot": false,
"headline": "fix: proper handling of Oga entity read and write",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T09:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70f8359b75470a35f9659f408f979a261429aecf",
"body": "Issue: lutaml/moxml#48\n\nOga's XML parser only supports the 5 standard XML entities\n(&, <, >, ", '). HTML entities like are\nsilently dropped during parsing.\n\nSolution: Pre-process XML to convert known named entities to\nnumeric character references before parsing. Oga correc\n[…]\nes (amp, lt, gt, quot, apos) are preserved as-is\n- Known W3C entities from EntityRegistry are converted to numeric form\n\nTests: Round-trip tests pass between Nokogiri and Oga (40 examples, 0 failures)",
"is_bot": false,
"headline": "Fix Oga adapter dropping HTML entities like ",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T04:39:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6e73f1e5b50d514f6254dc1fd042d605d498251d",
"body": null,
"is_bot": false,
"headline": "docs: update round-trip CI references to nokogiri-ox job name",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73cbe5bda09a3d0d66441c7ddfeb9dc224b1428b",
"body": "Use atomic group (?>) to prevent polynomial backtracking when\nmatching XML declarations. Without it, [^>]* can cause exponential\nbacktracking on certain input patterns.",
"is_bot": false,
"headline": "fix: prevent ReDoS in REXML encoding extraction regex",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34c5dd016e11248901bd934cb681a5ec3379cbc1",
"body": "- ruby-versions: Ruby 3.1/3.2/3.3/3.4/4.0 × categories, nokogiri+oga\n- nokogiri-ox: Ruby 3.3/4.0 × categories, nokogiri+ox (experimental)\n- nokogiri-rexml: Ruby 3.3/4.0 × categories, nokogiri+rexml (50KB limit, experimental)",
"is_bot": false,
"headline": "ci: merge round-trip workflows into single file",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faccb917fa43c3a2af7a664a2f5bafd9783d3a5a",
"body": null,
"is_bot": false,
"headline": "chore: gha",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0672d4476dbe84c2993611ab366fb726ea71de3",
"body": "…d-trip.yml)",
"is_bot": false,
"headline": "ci: override rake workflow to skip consistency tests (handled by roun…",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d04eaf4ff1e6fa7b1d1cda4596eae99b88469dbb",
"body": null,
"is_bot": false,
"headline": "ci: limit REXML to 50KB fixtures max (REXML exponentially slow)",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ce22ba60e3e486691997649d0e28bf1a622c140",
"body": "…large fixtures)",
"is_bot": false,
"headline": "ci: mark nokogiri-rexml job as continue-on-error (REXML too slow for …",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10f0e525bd6bf171006e3a95cc5ae2c039a738ff",
"body": null,
"is_bot": false,
"headline": "ci: use nokogiri as central tester for ox+rexml in round-trip-slow",
"author_name": "Ronald Tse",
"author_login": "ronaldtse",
"committed_at": "2026-04-07T02:23:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 172,
"latest_release_at": "2026-07-22T11:21:42Z",
"latest_release_tag": "v0.1.26",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 17,
"days_since_latest_release": 0,
"mean_days_between_releases": 9.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "moxml",
"exists": true,
"license": "BSD-2-Clause",
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/moxml",
"is_deprecated": false,
"latest_version": "0.1.26",
"repository_url": "https://github.com/lutaml/moxml",
"versions_count": 26,
"total_downloads": 207900,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2024-10-30T10:39:19.374000Z",
"latest_published_at": "2026-07-22T11:21:48.599000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 3,
"stars": 2,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2024-11-05",
"count": 2
},
{
"date": "2026-05-03",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 60594,
"source_files_sampled": 299,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile",
"docs/Gemfile"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 28,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [
{
"name": "benchmark",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "benchmark-ips",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "get_process_mem",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "libxml-ruby",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 5.0"
},
{
"name": "nokogiri",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.18"
},
{
"name": "openssl",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 3.0"
},
{
"name": "ox",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 2.14"
},
{
"name": "rake",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rexml",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "oga",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "ruby-ll",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop-performance",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop-rake",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rubocop-rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "simplecov",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "stackprof",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "tempfile",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "sys-proctable",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "opal",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.8"
},
{
"name": "opal-rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.0"
},
{
"name": "opal-sprockets",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "benchmark",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "benchmark-ips",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "get_process_mem",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "libxml-ruby",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "nokogiri",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "oga",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "opal",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "opal-rspec",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "opal-sprockets",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "openssl",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "ox",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rake",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rexml",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rspec",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-performance",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-rake",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-rspec",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "ruby-ll",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "stackprof",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "tempfile",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "asciidoctor",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll-asciidoc",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll-seo-tag",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jekyll-sitemap",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "just-the-docs",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 28,
"direct_count": 22,
"indirect_count": 6
}
},
"maintainership": {
"issues": {
"open_prs": 4,
"merged_prs": 52,
"open_issues": 6,
"closed_ratio": 0.824,
"closed_issues": 28,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ronaldtse",
"commits": 132,
"avatar_url": "https://avatars.githubusercontent.com/u/11865?v=4"
},
{
"type": "User",
"login": "kraft001",
"commits": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/983140?v=4"
},
{
"type": "User",
"login": "HassanAkbar",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/5301572?v=4"
},
{
"type": "User",
"login": "kwkwan",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/29566367?v=4"
},
{
"type": "User",
"login": "opoudjis",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1911039?v=4"
},
{
"type": "User",
"login": "suleman-uzair",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/96812483?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.635
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"dependent-tests.yml",
"docs.yml",
"opal.yml",
"rake.yml",
"release.yml",
"round-trip.yml"
],
"has_docs_dir": true,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/16 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 28 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "948532a670fc7218d22dee216f316348ee733a9f",
"ran_at": "2026-07-22T11:30:11Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T11:23:52Z",
"oldest_open_prs": [
{
"number": 39,
"created_at": "2025-11-18T01:38:02Z",
"last_comment_at": "2025-11-24T07:01:42Z",
"last_comment_author": "copilot-swe-agent"
},
{
"number": 42,
"created_at": "2025-11-24T07:01:40Z",
"last_comment_at": "2025-11-27T11:33:22Z",
"last_comment_author": "copilot-swe-agent"
},
{
"number": 47,
"created_at": "2025-11-26T04:42:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 83,
"created_at": "2026-05-20T14:44:18Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T11:06:37Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 3,
"created_at": "2024-10-30T12:41:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 23,
"created_at": "2025-05-15T18:27:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2025-05-15T21:30:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2025-05-16T09:51:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2025-11-17T09:17:08Z",
"last_comment_at": "2026-02-14T08:09:21Z",
"last_comment_author": "ronaldtse"
},
{
"number": 45,
"created_at": "2025-11-24T11:34:47Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/lutaml/moxml",
"host": "github.com",
"name": "moxml",
"owner": "lutaml"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 48,
"vitality": 81,
"community": 35,
"governance": 64,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 172,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "172 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 172
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 26,
"latest_release_tag": "v0.1.26",
"releases_from_tags": true,
"days_since_latest_release": 0,
"mean_days_between_releases": 9.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 35,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 6,
"inputs": {
"forks": 3,
"stars": 2,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 69,
"inputs": {
"packages": [
"moxml"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 207900,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "207,900 downloads all-time across rubygems",
"points": 55.3,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 207900,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.635
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 64% of commits",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 64
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 28 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"merged_prs": 52,
"open_issues": 6,
"closed_issues": 28,
"issue_closed_ratio": 0.824,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "82% of issues closed",
"points": 38.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 82
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "52/55 decided PRs merged",
"points": 36.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 52,
"decided": 55
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"followers": 2,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "lutaml",
"public_repos": 66,
"account_age_days": 2223
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of lutaml",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "lutaml"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "66 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 66
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"moxml"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "26 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 26
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 28 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 40,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.78,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "78 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 78,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 60594,
"source_files_sampled": 299,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/299 source files over 60KB",
"points": 54.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 299,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T11:30:25.078414Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/lutaml/moxml.svg",
"full_name": "lutaml/moxml",
"license_state": "custom",
"license_spdx": null
}