公开记录中等
软件健康报告模式 0.27.0 · 指标 2.5.0 · 2026-08-02 12:56 UTC
mas-bandwidth / serialize
A simple bitpacking serializer for C++
mas-bandwidth/serialize 的健康指数为 100 分中的 60 分，处于「中等」区间。 其得分最高的类别是Vitality（82/100），最低的是Engineering Quality（46/100）。 最近一次更新在 6 天前。 近期的大部分工作由 1 位贡献者完成。
60
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均，再依据公开记录的分布进行校准，使各等级具有百分位含义；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 34（存在风险）的上限。
60
卓越93-100公开记录中的最高层级（约前 5%）；基本满足所有检验标准
优秀80-92各方面均表现强劲；仅有少量不足
良好65-79健康；不足之处有限且可控
中等50-64可接受，但存在明显不足；建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节；采用时应保持审慎
危急1-19问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 57 经校准后在公布的指数量表上为 60（记录校准 2026-08-02）。
所有权
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
82
开发活跃度
70良好
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 6 天前 |
| 6.9/36 | 提交节奏 — 52 周中有 10 周有提交 |
| 17.6/18 | 提交量 — 最近一年 91 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 91 |
| human_commit_share | 1 |
| days_since_last_push | 6 |
| active_weeks_last_year | 10 |
发布纪律
100卓越
评分方式
| 27/27 | 有发布版本 — 已发布 14 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 7 天前 |
| 27/27 | 发布节奏 — 约每 0.3 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 14 |
| latest_release_tag | v1.5.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 7 |
| mean_days_between_releases | 0.3 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
48
流行度与采用
46薄弱
评分方式
| 34.5/60 | 星标 — 134 个星标 |
| 9.6/25 | 复刻 — 15 个复刻 |
| 1.7/15 | 关注者 — 3 位关注者 |
所用输入
| forks | 15 |
| stars | 134 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（BSD-3-Clause） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| readme_badge_services | — |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
51
维护者韧性（巴士系数）
29存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 4.7/22.5 | 提交分布 — 头号贡献者编写了 79% 的提交 |
| 9.5/13.5 | 贡献者广度 — 7 位贡献者 |
| 6/10 | OpenSSF Scorecard：Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 7 |
| top_contributor_share | 0.79 |
议题与 PR 响应能力
64中等
评分方式
| 31.5/42 | 议题解决 — 75% 的议题已关闭 |
| 24/30 | PR 接受 — 已裁定的 PR 中 16/20 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 1/16 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 16 |
| open_issues | 1 |
| closed_issues | 3 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.75 |
| closed_unmerged_prs | 4 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
已排除计分（无数据或不适用）：newcomer_pr_acceptance。 其余权重已重新归一化。
所有权与托管责任
64中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 15.7/25 | 所有者影响力 — mas-bandwidth 有 151 位关注者 |
| 18.3/25 | 既往记录 — 46 个公开仓库，账户约 3 年 |
所用输入
| followers | 151 |
| owner_type | Organization |
| is_verified | — |
| owner_login | mas-bandwidth |
| public_repos | 46 |
| account_age_days | 1,121 |
工程质量
基础的工程与文档实践是否到位？
46
工程实践
44薄弱
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 0/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 否 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 4 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | bitpacker, bitpacking, bits, serialize |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
55
安全态势
55中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/16 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.5 |
已排除计分（无数据或不适用）：packaging, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？权重刻意设小（4%）：代理工具链是一项真实的维护信号，但完全不具备的仓库仍可达到 100/100。
52
AI 代理上下文与指引
74良好
评分方式
| 45/45 | 代理指令 — CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 29.3/40 | 可读的提交历史 — 100 次人类提交中有 55 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.55 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 14,320 |
验证循环（构建 / 测试 / 类型检查）
21存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 0/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — C++（静态类型） |
| 0/10 | 可复现环境 |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 57 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 否 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0.57 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
91优秀
评分方式
| 45/45 | 可类型检查的代码 — C++（静态类型） |
| 45.8/55 | 可控的文件大小 — 采样的 6 个源文件中有 1 个超过 60KB |
所用输入
| primary_language | C++ |
| largest_source_bytes | 149,818 |
| source_files_sampled | 6 |
| oversized_source_files | 1 |
关键数据
134GitHub 星标
7贡献者
91最近 12 个月提交数
6距最近推送天数
14发布版本数
1巴士系数（bus factor）
1开放议题
—软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
更多细节
Star 与 Fork 历史 0 ★ / 15 ⇿
0Star
15Fork
7发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 2修订 5
每个点涵盖 3 天。
OpenSSF Scorecard 5.5 / 10
5.5综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 10 out of 10 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/16 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
全部依赖 0
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 0 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies to assess
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"bitpacker",
"bitpacking",
"bits",
"serialize"
],
"is_fork": false,
"size_kb": 232,
"has_wiki": false,
"homepage": null,
"languages": {
"C++": 200192,
"CMake": 4244,
"Python": 4306
},
"pushed_at": "2026-07-26T21:18:25Z",
"created_at": "2023-12-24T22:02:55Z",
"owner_type": "Organization",
"updated_at": "2026-07-26T21:18:27Z",
"description": "A simple bitpacking serializer for C++",
"is_archived": false,
"is_disabled": false,
"license_spdx": "BSD-3-Clause",
"default_branch": "main",
"license_spdx_raw": "BSD-3-Clause",
"primary_language": "C++",
"significant_languages": [
"C++"
]
},
"owner": {
"blog": "https://mas-bandwidth.com",
"name": "Más Bandwidth LLC",
"type": "Organization",
"login": "mas-bandwidth",
"company": null,
"location": "United States of America",
"followers": 151,
"avatar_url": "https://avatars.githubusercontent.com/u/138895540?v=4",
"created_at": "2023-07-07T15:13:19Z",
"is_verified": null,
"public_repos": 46,
"account_age_days": 1121
},
"license": {
"state": "standard",
"spdx_id": "BSD-3-Clause",
"raw_spdx": "BSD-3-Clause",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-07-25T20:13:17Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2026-07-18T19:43:55Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2026-07-10T03:31:14Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2026-07-10T03:17:15Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-07-10T02:48:56Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-07-09T18:42:33Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-07-09T14:40:26Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2026-06-11T18:24:50Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2023-12-27T01:35:27Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-07-22T22:40:22Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-07-22T22:40:21Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-07-22T22:40:20Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-07-22T22:40:19Z"
},
{
"tag": "v1.0",
"kind": "other",
"published_at": "2026-07-22T22:40:18Z"
}
],
"recent_commits": [
{
"oid": "19d332e3f6c78743b80a4e453fa4ec0468a6dc87",
"body": "…ocs (#24)\n\nserialize.h says it at :870, :918 and :933 -- 'All checking is performed by debug\nasserts on write.' I audited this header, quoted that line in my own notes, and\nfiled the write path as a defect anyway. Recording it so the next pass does not.\n\nAlso records two things worth keeping. The B\n[…]\ngranule write and ASan is blind to it; an identical raw memcpy is also\nunreported. I nearly recorded 'no ASan report' as evidence of safety here.\n\nCo-authored-by: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: the write/read rule, which this header states in its own d…",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T21:18:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5518bc7968a99e763cb81456f7f44eb839e44d80",
"body": "CLAUDE.md: add the HOT block — decisions that read as bugs",
"is_bot": false,
"headline": "Merge pull request #23 from mas-bandwidth/docs/hot-block",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T19:40:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34d2d8488bd78a74c307e6519f5f9808f509230e",
"body": "Coverage was 6/12 across the lane and the four flagship libraries were the gap, which\nis the worst possible place for it: these are the repos most likely to be reasoned\nabout by someone who did not write them.\n\nDISTILLED, NOT INVENTED. Every item below was already documented somewhere in this\nfile; \n[…]\n\ncrash a debug server.\n\nGlenn, 2026-07-26, emphatic: the per-repo hot block and the per-bud queue are \"the most\nimportant things while you work.\"\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: add the HOT block — the four C libraries had none",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T19:38:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "98be7dda36848fdbc767c5686dc841aa80cea5b4",
"body": "Add SECURITY.md",
"is_bot": false,
"headline": "Merge pull request #22 from mas-bandwidth/docs/security-policy",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T18:36:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0269861d1d0c4e61cc640850d70d1b9f4bbbae24",
"body": "This repo had no security policy, so a finder had no documented private channel and\nwould reasonably have opened a public issue. yojimbo has had one; netcode, reliable and\nserialize had none.\n\nFollows yojimbo's reporting section, with the scope written for what this library\nactually does rather than\n[…]\nyer that does -- and that this does NOT put\nmemory safety out of scope, since a stream is only trustworthy if the layer above really\nverified it.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add SECURITY.md",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T18:26:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f42b74c7f246c7a0d8e22f732b2a8e6c1cf21e86",
"body": "ci: filter the push trigger to main, like the other three C libraries",
"is_bot": false,
"headline": "Merge pull request #21 from mas-bandwidth/ci/filter-push-trigger",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T18:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6141454382e7651ab577e366d649cd07f7b8e84",
"body": "ci.yml used a bare `on: push:` with no filter, so the full matrix fired on every\nbranch AND every tag. A branch push plus its pull request ran the whole thing twice,\nand every release tag ran it a third time. netcode, reliable and yojimbo all filter\nto main; serialize was the odd one out.\n\nNot a cor\n[…]\nre branch by pushing to it; that capability should be replaced\nrather than quietly dropped, and dispatch makes it explicit instead of accidental.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: filter the push trigger to main, like the other three C libraries",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T18:02:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bcc96f7a838a442ff866e38983220ee70ead0360",
"body": "…g (#20)\n\nGlenn, 2026-07-26: \"credit where credit is due... adjust all crediting asks\nin all our open source repositories to credit Glenn Fiedler and Rowan Claude.\nWe can skip the Mas Bandwidth LLC thing, it is clumsy. Just the people.\"\n\nStill an official request, not a license term: the license is unchanged and\nthe BSD copyright notice remains the only legal requirement.",
"is_bot": false,
"headline": "Crediting: credit Glenn Fiedler and Rowan Claude, drop the LLC headin…",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-26T15:27:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e907febc07a48f73ecc18f4b0aa888cdcddf57c",
"body": "* serialize 1.5.0\n\n* serialize 1.5.0",
"is_bot": false,
"headline": "serialize 1.5.0 (#19)",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-25T20:12:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d997df91487effa3d40adcea63dc5443ebe74cb8",
"body": "…#18)\n\nThe action tells contributors they can retrigger the check by commenting\n`recheck`. `suggest-recheck` defaults to true, so every \"please sign\"\ncomment it posts ends with \"You can retrigger this bot by commenting\nrecheck in this Pull Request\". The step gate never accepted that comment.\nA contr\n[…]\ntising the path. Rejected: the capability is worth having,\nand it is what this file's own \"recording a signature by hand\" procedure\nnow ends in.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CAA: accept `recheck`, the recovery path the bot already advertises (…",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-25T15:08:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "83cf1344445c80196fc259bd3b9b82bb500de15c",
"body": "…ntly (#16)\n\nThe Contributor Assignment Agreement workflow has two defects, and both have\nalready cost us real signatures.\n\n1. It failed on every signature posted on an issue.\n\n contributor-assistant/github-action is pull-request-only by design. It opens\n with a GraphQL query for repository.pull\n[…]\nng itself.\nThe signature ledger stays a human-curated legal record.\n\nThe header comment now documents both limits and the manual recording path.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CAA: stop failing on issue threads, and stop dropping signatures sile…",
"author_name": "Rowan Claude",
"author_login": "rowan-claude",
"committed_at": "2026-07-24T21:10:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e90640ff986a928c7657d9c923a4b01cf708dc36",
"body": "Wire-format standard, conformance checker, and clean-room wide-string support",
"is_bot": false,
"headline": "Merge pull request #15 from mas-bandwidth/relicense/serialize-clean-room",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-22T02:46:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19f0d14437c5e0b0b6baa081f90ba51679b29e76",
"body": "I wrote four conformance checkers today and wired none of them into CI. A\nchecker nobody runs is exactly the drift they exist to prevent — I stated the\ndoctrine and then did not apply it to my own work.\n\nEach job parses artifacts the real library produces using ONLY what the\nspecification states, wi\n[…]\nts are written against STANDARD.md, so a silent drift there makes those\nimplementations wrong with no symptom until two of them refuse to talk.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: run the conformance checkers",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T19:14:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5788266319f1d58a910ee49be7863ea70bd6e71d",
"body": "The wstring path had no dedicated test. It was exercised only incidentally — a\nfield inside test_serialize, two calls in test_read_write, and the golden\nvector — none of which touched a boundary, and none of which touched the\ndocumented failure behaviour at all.\n\ntest_wstring_validation covers:\n - \n[…]\nted on its own merits. Rewriting code to move a blame\ncount would be theatre; writing the missing test for a documented safety\nproperty is not.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: real wide-string coverage, including the documented failure path",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T18:40:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "684c4418e03760bd6c1cb4449fd2d80ba501b88b",
"body": "Git treats every distinct name/email pair as a separate person. Without this,\nany contribution or ownership analysis silently miscounts — and it did. On\n2026-07-21, a copyright-ownership review across these four libraries initially\nattributed ~2,200 of Glenn's own lines to third parties, because he \n[…]\n).\n\nThe file invites contributors to correct their own entry. It exists to credit\npeople accurately, not to overrule how they wish to be named.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "add .mailmap: canonical identities for ownership analysis",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T18:32:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e5db36dbf85d71f8b81f2cc9191c79a221c92c14",
"body": "Stripping the UTF-8 BOM from serialize.h broke all four Windows CI jobs. The\nBOM was load-bearing and I removed it as cruft — the second time today I have\nmade exactly that mistake, after Glenn had to tell me serialize_restrict was\nload-bearing for the same reason.\n\nWHY IT BROKE. serialize.h contain\n[…]\nabout my vantage point, not about\nthe code. Verified before and after: build clean, tests pass, golden wire bytes\nunchanged, conformance 20/20.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix the Windows build my BOM removal broke",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T18:06:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a0ed9d1554651da65dc4bb4516b2a7b3d7932bf5",
"body": "The conformance checker proves what the document SAYS is true. It cannot catch\nwhat the document OMITS, or a claim in the prose that the checker itself never\nencoded. Cross-checking every macro in serialize.h against the text found both.\n\nERROR — serialize_uint64 was misdescribed. The int64 section \n[…]\nConformance still green (20 checks), and now the prose and the checker agree\nabout uint64 instead of merely both being individually defensible.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "STANDARD.md: fix an error and three omissions the coverage audit found",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T17:01:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ae9d165263fefdbd6cd13c9ffdc5e7061e2bfddc",
"body": "This morning's verification of serialize/STANDARD.md was a one-off script in a\nscratch directory. A specification verified once and then left alone drifts,\nand a drifted spec is worse than none because people build on it. This is the\nsame check, committed and runnable.\n\n20 checks decoding golden_wir\n[…]\nrly published\nthe wrong conclusion in this very message.\n\nThird of four. netcode and reliable have the same tools/conformance; yojimbo is\nnext.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "conformance: make the STANDARD.md check permanent and runnable",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T16:45:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "30b95c0ad6655981775211ec9c91181ba0145cb5",
"body": "serialize had no format specification. netcode has one (512 lines) and it is\nthe reason netcode is the only library here where an independent\nimplementation — or a clean-room rewrite — could be done properly. This closes\nthat gap for serialize.\n\nCovers: LSB-first bit packing into 64-bit little-endia\n[…]\nan room\nfor this library, never the implementation side. Where document and code\ndisagree, the code is authoritative and the document is a bug.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "STANDARD.md: specify the serialize wire format",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T15:43:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0191b8d56920bc455a5d9e1dec50323c910dc222",
"body": "An implementer that had never read the removed code wrote it back from the\nin-house specification alone. Build clean (0 warnings), ctest 1/1, and the\ngolden wire-format bytes matched ON THE FIRST ATTEMPT.\n\nTHE SEPARATION, stated precisely so nobody later overclaims it. This is the\nstandard dirty-tea\n[…]\nhe sibling does not have).\n\nExternally-attributed lines in serialize.h: 61 -> 17 (all now call sites and\ntest scaffolding, not implementation).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "clean room step 2: wide-string support reimplemented from specification",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T15:28:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "58a44a4a4c7a9a1adfb2a34abf8f3f37d1e789ec",
"body": "…site\n\nRemoves the six wstring implementation constructs from serialize.h:\n #include <wchar.h>\n serialize_wstring_internal() (33 lines)\n serialize_wstring macro (8)\n read_wstring macro (9)\n write_wstring macro (12)\n serialize_copy_wstring() (13)\n\nDELIBERAT\n[…]\nremoved code writes it back from\nthat specification alone. I did the deletion and will not write the\nreplacement — the separation is the point.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "clean room step 1: strip the wstring IMPLEMENTATION, keep every call …",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T15:22:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "680b951527bbbcac25742b816f7bac44c176aa20",
"body": "serialize.h was the only file in the repo carrying a byte-order mark (efbbbf).\nIt arrived with an editor that saves UTF-8-with-BOM and has been there since\n2026-03. A BOM ahead of the header guard is not portable: some older\npreprocessors and several build/lint tools treat it as a stray token or fai\n[…]\nean one of the 62 externally-attributed lines in this file was a byte-order\nmark rather than authored expression.\n\nBuild clean, ctest 1/1 pass.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "serialize.h: strip the UTF-8 BOM",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-21T14:32:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fe2df46b43cd8fb2d504307847da52cba6479954",
"body": "…ing before merge.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add the Contributor Assignment Agreement (CAA) gate: PRs require sign…",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-18T22:27:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3a066b8bc8798b6b6dfbfecfd348ad63f82c3bd4",
"body": "…diting)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 1.4.4 (dead-code cleanup, release-check workflow, cre…",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-18T19:36:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2ac1098aff5c733f4b568a8239ecaafe13b9cf6b",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "FUNDING: add Patreon (patreon.com/MasBandwidth)",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-18T18:46:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4e186d6ac6d903fa036b3fed653174900209ec90",
"body": "…th LLC\". License unchanged.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add crediting request: \"serialize - Glenn Fiedler\" under \"Mas Bandwid…",
"author_name": "Rowan",
"author_login": "rowan-claude",
"committed_at": "2026-07-18T17:40:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "04c04dc425a430f86e9004a035e2a3529b155593",
"body": "Found during a dead code review of the serialize.modern port: the clamp\ntemplate has no callers anywhere in the repo, and TestData::v32/v64 are\ndeclared and zeroed but never serialized or checked. No behavior change;\nthe golden wire format test confirms the wire bytes are untouched.\n\nAlso re-anchors the CLAUDE.md line references, two of which had already\ndrifted before this change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Remove dead code: unused clamp helper and unserialized test fields",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-13T02:00:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79a329fee32c9739cc3b9dda644ab6aa176e86ed",
"body": "Add release version check workflow",
"is_bot": false,
"headline": "Merge pull request #12 from mas-bandwidth/add-release-check",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T05:51:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6564169d43b285bbac50d95954ced331759c8e8b",
"body": "Fails the tag build if a release tag does not match the version\nrecorded in the repo, so a release can't ship with stale version\nmetadata (as netcode v1.3.2 did with its CMake project version).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add release version check workflow",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T05:47:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1708e04fe7c5b0d5b1011563e58640476d2c13bd",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 1.4.3",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T03:29:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d2e5b47f15e8c44f72f2369053108fd50622a15f",
"body": "Simplifies the write side contract: instead of multiple-of-4 size plus\n8 bytes of allocation slack, the buffer size is simply a multiple of 8,\nwhich contains every qword store within the buffer itself — no slack\nneeded on the write side. The debug assert now enforces multiple of 8,\ncatching non-conforming buffers immediately. README, constructor docs\nand CLAUDE.md all state the same rule.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Write buffer sizes must be a multiple of 8 bytes",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T03:27:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bc5a2e6e555fbaeb911e3c7427ec6da66d418b72",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: v1.4.2 is released",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T03:17:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d932ddc782b6a16c97e101fcab178b363ffa4979",
"body": "The writer keeps its plain 64 bit scratch and identical two-op hot\npath, but flushes a qword when the scratch fills instead of a dword\nwhen it half fills, recovering the bits that spilled past 64 only\ninside the flush branch. The flush runs half as often. Measured on\nApple Silicon: bitpacker write 4\n[…]\nu++98/c++11/c++17 with\nzero warnings, golden wire format test untouched, ASan+UBSan+alignment\nclean, 200k differential fuzz driver inputs clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "64 bit flush writer: writes are ~25% faster",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T03:15:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d70bdaabba213c7ef61063eb63d2a6000a7c9e67",
"body": "The limitations section still described the pre-1.4.0 contracts: 4 byte\nbuffer alignment (no longer required anywhere), the round-up-to-4 read\nallocation (now: extend at least 8 bytes past the data), and the 256 MB\nbuffer limit (gone with 64 bit bit counts).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "README: update limitations for the 1.4.0 reader and 64 bit counts",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T02:58:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f71f50e29514b5b3cd29f4b2465df95e6994dcf5",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: v1.4.0 is released",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T02:51:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ff717ba2e93e77fd23d09d88a0974e04526c36d4",
"body": "All bit and byte counters in BitWriter, BitReader and the three stream\nclasses widen from int to int64_t, along with the buffer size and byte\ncount parameters and the bits/bytes processed accessors. Buffer sizes\nare now effectively unlimited (previously capped at 256 MB because bit\ncounts were 32 bi\n[…]\n gnu++98/c++11/c++17 with\nzero warnings, ASan+UBSan+alignment clean including the large buffer\ntest, 200k differential fuzz driver inputs clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "64 bit bit counts: remove the 256 MB buffer limit",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T02:43:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f29bc7a49da3475b5ef411327048cd5d63f5ffa0",
"body": "The reader no longer maintains scratch state with a word refill branch.\nEach ReadBits loads a 64 bit window from the current byte position with\nmemcpy and shifts by the bit remainder, so reads carry no dependency\nbetween calls except advancing the bit index. Measured on Apple\nSilicon: bitpacker read\n[…]\nu++98/c++11/c++17,\nASan+UBSan+alignment clean (which proves the new contract is honored\neverywhere), 200k differential fuzz driver inputs clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Branchless BitReader: reads are ~4x faster",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-10T02:28:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb3f6aceafa1b064fd19a93ef43b7d1daa2941a9",
"body": "Covers in-source CMake generation (CMakeCache.txt, CMakeFiles/, install\nand test scripts, generated Makefile), alternative build directory\nnames (out/, cmake-build-*), built binaries and intermediates, Visual\nStudio and Xcode project generation, and libFuzzer artifacts. Verified\nthat a full in-source configure and build leaves git status clean and\nthat no tracked file matches any pattern.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Expand .gitignore: never check in binaries or CMake generated files",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T20:59:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3812fd93d37cfa34dc90f7e2ce0d26b07b37fad1",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "BUILDING.md: document Homebrew install",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T19:56:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e5052db925a819a4e26c7317c9709f3bcc724a48",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: v1.3.1 is released",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T18:42:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5d959a2cf6a19061f8b6d120676c4b7f1c67765f",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 1.3.1",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T18:36:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bb4e83e412fd7f880d19d05dcb5f68a6a1760027",
"body": "test_unaligned_writer used alignas(4), a C++11 keyword, which broke\nconsumers that compile the embedded tests in pre-C++11 mode (yojimbo's\nmacOS CI). A uint32_t backing array guarantees the alignment in C++98.\nThe test suite now compiles clean at gnu++98, c++11 and c++17.\n\nThe wstring checks in Read\n[…]\n a narrow\nstring, which warned as C4566 on MSVC with a western code page. Use\nexplicit code points, as the golden wire format test already does.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Test section: no C++11 alignas, no non-ASCII literals in checks",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T18:23:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "db678e5e68af0a7dd26eb1b7d636abcfeb2f9781",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: v1.3.0 is released",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T14:41:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dfba6bc803fcf0513fbb9ea4c2c161810e15866a",
"body": "serialize.h now includes exactly what library code needs: stdint.h,\nstddef.h, string.h, wchar.h, math.h (plus conditional assert.h and\nglibc endian.h). Removed stdarg.h, inttypes.h and memory.h, which had\nzero usage sites, and stdio.h/stdlib.h, which were only used by the\nembedded tests and now live\n[…]\n macro family.\n\nexample.cpp and bench.cpp now include stdio.h/stdlib.h themselves\ninstead of relying on serialize.h providing them transitively.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Trim header includes to only what the library uses",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T14:28:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0ab926ee35340ebb50c7f7bcf41ee817625a8d28",
"body": "Invalid packet data must abort the entire serialize immediately rather\nthan continuing deeper or looping on malicious bounds; the library is\nlow-level C-style without exceptions, so early-return macros are the\npragmatic mechanism. Moved to known limits by design, alongside the\nread buffer contract.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: macro early-return is the intended security posture",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T14:18:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cea6b39be5fa1a61af55333fe0d6e81a53ae8930",
"body": "The MSVC warning disables (4127, 4244) are now wrapped in push/pop so\nthey no longer alter warning state for every translation unit that\nincludes the header. Code using the serialize macros compiles at the\nincluding file's warning state; this repo's own executables opt back\ninto the disabled warning\n[…]\nest.cpp.\n\nNo wire format or release behavior changes: the golden wire format\ntest is unchanged and benchmark numbers are unchanged within noise.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Header hygiene: push/pop MSVC pragmas, member init, explicit asserts",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T14:08:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "61ddebce0a7f5440a3d7307694eb0f1f36b206ae",
"body": "…lision\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: yojimbo depends on serialize.h, macro overlap is not a col…",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T13:40:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bd14340af35387ee47e609efde489e28dd48921",
"body": "Debug asserts verify correctness; in release, correctness is the\ncaller's responsibility. The exception is network input, which the read\npath validates and drops at runtime. Reclassified from sharp edge to\nknown limit by design.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: unchecked release writes are the intended trust model",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T13:39:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cf86efd82968ef413725dad1248d4e345a9f0bca",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CLAUDE.md: gcc benchmark inflation is fixed",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T13:33:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9c99e942ec93fd2315ca817a0a931d07095f7f2e",
"body": "Even with the escape barrier, gcc still reported ~470M packets/s\nstream write: with only one field varying and all field bit widths\nconstant, it precomputed the scratch words for the loop-invariant\nfields at compile time and only patched in the varying bits. Packet\nfields are now driven by a seriall\n[…]\nt be constant folded. Read variants bumped from 16 to 64\nand built from the same generator. clang write/read numbers are\nunchanged within noise.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Vary all packet fields per iteration in the stream benchmark",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T13:27:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "497931c2e9f7d467be7931c8f50be68a22812b4c",
"body": "The previous fix (varying the packet per iteration) was not enough:\ngcc still deleted the serialization work because nothing observed the\noutput buffer inside the loop (~134 GB/s reported), and hoisted most\nof the read decode because only one decoded field fed the sink. Add a\nbench_escape barrier (e\n[…]\nape; compiler barrier on MSVC) after each\nserialize so the buffer and the decoded packet are observed. clang\nnumbers are unchanged within noise.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix stream benchmark dead code elimination on gcc for real",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T13:20:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "29449b4fda8d359e93e40802e19a43310192efe7",
"body": "Serializes a full range 64 bit integer in [min,max] using the minimal\nnumber of bits on the wire. Built as an exact parallel of the 32 bit\npath: bits_required64, SerializeInteger64 on WriteStream, ReadStream\nand MeasureStream, and the serialize_int64 / read_int64 / write_int64\nmacros. Range arithmet\n[…]\nhe hostile read\nand differential round trip passes. The golden wire format test is\nuntouched and still passes: existing wire data is unaffected.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add serialize_int64 macro",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T13:04:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a8a5502f016752eba6d3afb80769d240ed2e7a22",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update CLAUDE.md: verified state, open items",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T06:25:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2306f42385f7470e0a9f3936d009dcd2646e7b0a",
"body": "The stream write/read loops serialized an identical packet to the same\nbuffer every iteration, so gcc proved the loop body pure and deleted\nthe serialization work, reporting ~150 GB/s fiction on Linux. The\npacket now varies per iteration on the write side, and reads cycle\nacross 16 pre-written variant buffers. clang/MSVC numbers are\nunchanged within noise.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix stream benchmark being optimized away by gcc",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T06:23:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "24f1b76b1271856d4efd9712e825b5d80dc3d2a7",
"body": "The serialize::serialize INTERFACE target now carries only the include\npath: warning and fast-math flags are scoped to this repo's executables,\nand the test/example/bench targets only build when serialize is the top\nlevel project (override with SERIALIZE_BUILD_TESTS). Adds install rules\nand package \n[…]\nv1.2.5).\n\nVerified: top level build and tests, add_subdirectory consumer (no flag\nleakage, no dev targets), and install + find_package consumer.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Make CMake consumer friendly and add version macros",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T06:19:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "12e75cefe91ce9eefe55488291ae7015509d0918",
"body": "Cross-compiles the test suite with g++-s390x-linux-gnu, statically\nlinked so the binaries need no s390x sysroot, and runs it under QEMU\nuser emulation in both Debug and Release. This is the first real\nexercise of the bswap / host_to_network path, and the golden wire\nformat test proves a big endian machine produces wire bytes identical\nto the little endian platforms.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add big endian CI coverage via s390x cross-compile and QEMU",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T06:14:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cec06689d42b49f7921505ce3c2af83edd6924c3",
"body": "bench.cpp measures the raw bitpacker (mixed bit widths through\nBitWriter/BitReader) and the stream + serialize macro path with a\nrepresentative packet, reporting best-of-5 trials. CI runs it on\nRelease jobs for each platform; numbers from shared runners are\nindicative only.\n\nReference numbers on Apple Silicon (M-series, clang -O3):\nbitpacker write ~4.6 GB/s, read ~2.1 GB/s, stream write ~26M\npackets/s, stream read ~45M packets/s.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add throughput benchmark",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T06:09:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b732fd80a76c6caa936e00d53eaf0d7875c406c3",
"body": "BitWriter previously stored each flushed dword through uint32_t*\ndirectly, which made unaligned write buffers undefined behavior and was\nasymmetric with BitReader, which loads words via memcpy. All three\nwriter store paths (WriteBits, FlushBits, WriteBytes) now go through\nmemcpy with byte-based addr\n[…]\nhin a dword, so the guarantee stays locked in under the\nCI sanitizer job. The golden wire format test confirms the bytes\nproduced are unchanged.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Store bit writer words with memcpy so write buffers need no alignment",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T06:02:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d6a20f89b4612fae46a411fa81f9c8c2cddf40bf",
"body": "No longer needed in this library. The fuzz harness op slot it occupied\nnow exercises ranged integers of varying width instead.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Remove serialize_ack_relative_internal",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T05:51:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "02e9f4d48d2c1815c1cba3bee63868c6c9d88c25",
"body": "The golden test pins the exact bytes the serializer produces for a\nfixed set of values covering every primitive, and verifies both that\nwrites produce those bytes and that those bytes decode to the expected\nvalues. It runs on every CI platform, so any wire format change or\nplatform divergence fails \n[…]\nStream, and compared, trapping on any write/read asymmetry.\nMeasureStream runs the same ops and must never measure fewer bits than\nwere written.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add golden wire format test and differential round-trip fuzzing",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T05:46:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb95267ba6ca54b57ad64206c4a0f3e0c8e7f168",
"body": "Runs the libFuzzer harness for an hour every night at 08:00 UTC, with\nthe corpus cached across runs so coverage accumulates. Crash\nreproducers are uploaded as workflow artifacts on failure. Can also be\ntriggered manually with a custom duration via workflow_dispatch.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add nightly fuzz workflow",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T05:16:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "112d9a91d4992c91bc598bb63c59c1df86ecac56",
"body": "Removes @param allocator docs for constructor parameters that don't\nexist in this library, and rewrites the BaseStream::SetContext docs to\ndescribe contexts as they work here rather than referencing yojimbo\nconnections.\n\nAdds fuzz.cpp, a libFuzzer harness that drives every ReadStream\nprimitive with \n[…]\nts stay live: malicious input must fail reads by\nreturning false, never by tripping an assert. CI runs the harness for\n60 seconds on every push.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix doc comments inherited from yojimbo and add libFuzzer harness",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T05:06:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "444b9ea73f841f3a918f0258a5ed52e56565ce87",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add CI badge to README and ASan+UBSan job to CI",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T04:55:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fc2e1dabd6c71ce074db2af0e278c6e18e7085db",
"body": "Replaces premake5 with a CMakeLists.txt that builds the header-only\nlibrary plus test and example binaries with the same flags as before.\nAdds a GitHub Actions workflow that builds and runs the tests in Debug\nand Release on Linux (ubuntu-24.04), macOS Apple Silicon (macos-15),\nand Windows x64 (windows-2025).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Switch build system from premake to CMake and add CI",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T04:38:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "049d42bbcf9802af1ea610b64cf32e4fa43df72c",
"body": null,
"is_bot": false,
"headline": "claude fix",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-09T03:24:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2fbbd70dcad2e2d7a84a702a38050aa46483691",
"body": null,
"is_bot": false,
"headline": "minor doc fix",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T08:45:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05940c9ec6f71f3ea806867e0810bd4c9b737eaf",
"body": null,
"is_bot": false,
"headline": "nan fix",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T08:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3124bbb2d22735a974c82963b70cf28b401a313f",
"body": null,
"is_bot": false,
"headline": "more fixes...",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T08:28:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c9501b5391f8649da70dcf482caf51dcaab0dab",
"body": null,
"is_bot": false,
"headline": "more fixes",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T08:20:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2daaba38ddfbc341d05ba0f20761b31421a5cff8",
"body": null,
"is_bot": false,
"headline": "security audit complete",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T08:04:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b899696ed4cb844ae2cb386bd3f2c08f601aed09",
"body": null,
"is_bot": false,
"headline": "update copyright",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T07:49:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1233be996fc175d800ab30a6602991129d2bd0e",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:mas-bandwidth/serialize",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T07:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7c7c331ae8f1a38b56f0513fe8c6814974d2811",
"body": null,
"is_bot": false,
"headline": "security audit by claude fable",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-07-07T07:48:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0359ce4b8ecd19992e8ba94d079a62b400ae8e9",
"body": "Signed-off-by: Glenn Fiedler <glenn@networknext.com>",
"is_bot": false,
"headline": "Update README.md",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-15T12:05:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e83e7ad131c6a4977ee2e1472ef457daddd0ba49",
"body": "Signed-off-by: Glenn Fiedler <glenn@networknext.com>",
"is_bot": false,
"headline": "Update README.md",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-15T12:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92997d9a9124fa068f65a21e96384f3a635e7e9f",
"body": "Signed-off-by: Glenn Fiedler <glenn@networknext.com>",
"is_bot": false,
"headline": "Update README.md",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-10T15:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c93790062fb9f02a3898cfd1188d3c515c9cf8b",
"body": "Signed-off-by: Glenn Fiedler <glenn@networknext.com>",
"is_bot": false,
"headline": "Update README.md",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-10T13:50:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "062f79f546436daf104894cc017a740e0ff2da16",
"body": "Signed-off-by: Glenn Fiedler <glenn@networknext.com>",
"is_bot": false,
"headline": "Update README.md",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-10T13:49:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69de897c6a14c16d572961cf3a9083ad2b242ae2",
"body": null,
"is_bot": false,
"headline": "fuck github actions",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-10T13:46:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "972ec57fd9dc19960fbfdf8c3fceebdf31de4d32",
"body": null,
"is_bot": false,
"headline": "fix up wchar stuff on macos",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-10T13:37:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "932b4342337d1bcb02986cb313eb852081d9294f",
"body": "Add wstring support",
"is_bot": false,
"headline": "Merge pull request #11 from Tornamic/main",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-06-10T13:31:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e449c8dabb06d26c1d3ced4e0a7884e89aa71c34",
"body": null,
"is_bot": false,
"headline": "fix BufferSize",
"author_name": "Tornamic",
"author_login": "Tornamic",
"committed_at": "2026-03-10T20:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7a06e760dcaf234ff63fde3adc014e1b21bdf57",
"body": null,
"is_bot": false,
"headline": "Add wstring support",
"author_name": "Tornamic",
"author_login": "Tornamic",
"committed_at": "2026-03-10T20:33:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56a8532bcefa87b3cb7ecc0c20e8f2581b522303",
"body": "Unified memory layout of BitReader across debug and release builds",
"is_bot": false,
"headline": "Merge pull request #10 from valverl/bitreader_layout",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2026-01-07T17:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44673d574f9031232f6b6f23da7ef6019cf404a7",
"body": "…1plus: error: ‘-Werror=All’: no option ‘-WAll’; did you mean ‘-Wall’?\"",
"is_bot": false,
"headline": "Revert changes to premake to prevent compilation error in ubuntu: \"cc…",
"author_name": "Luis Valverde",
"author_login": "valverl",
"committed_at": "2026-01-07T17:23:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07ffd3c9bb19ee69e3fe2b97dec4419be865cded",
"body": "…lso got rid of premake warning about FatalWarnings flags value.",
"is_bot": false,
"headline": "Unified memory layout of BitReader across debug and release builds. A…",
"author_name": "Luis Valverde",
"author_login": "valverl",
"committed_at": "2026-01-07T17:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13bccb40e801f7bc9c4c529e396718cd0159dffc",
"body": "[Bug Fix] Fix buffer overflow as a result of overflowed assert",
"is_bot": false,
"headline": "Merge pull request #9 from jparr721/main",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2025-11-19T02:16:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "588ee752d71d8f9873c197323e0d16f4a0cf4c2b",
"body": null,
"is_bot": false,
"headline": "fix the build",
"author_name": "Jarred Parr",
"author_login": "jparr721",
"committed_at": "2025-11-17T15:41:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0a21b1c833e6d9286fb97c05deb25a3458595b",
"body": null,
"is_bot": false,
"headline": "fix overflow problems",
"author_name": "Jarred Parr",
"author_login": "jparr721",
"committed_at": "2025-11-17T00:49:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63caa842c6727d39604df4fe8f2f5e369ebfeed9",
"body": "Detect endianness on ARM64 on Windows",
"is_bot": false,
"headline": "Merge pull request #8 from valverl/arm64_fix",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2025-11-12T16:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbc90e5bdbc8518130a22ba45e2ef31d027579e0",
"body": null,
"is_bot": false,
"headline": "Detect endianness on ARM64 on Windows",
"author_name": "Luis Valverde",
"author_login": "valverl",
"committed_at": "2025-11-12T14:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1cc320af986e286306743564308ee4ae96af728",
"body": "silence unintialized warning",
"is_bot": false,
"headline": "Merge pull request #6 from marcin-serwin/push-vrxvsukklxkl",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2025-05-02T12:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2bf7bf2c9f2f0f8bcfdc1d9d42f8d58ee46271f",
"body": null,
"is_bot": false,
"headline": "silence unintialized warning",
"author_name": "Marcin Serwin",
"author_login": "marcin-serwin",
"committed_at": "2025-05-02T07:45:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "584fd93c109f2bbbc54ca5192b4580c237d8df15",
"body": null,
"is_bot": false,
"headline": "try this fix for windows",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T18:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e92db71aaf4614d0479eb8e57b862dfcca6f22c8",
"body": null,
"is_bot": false,
"headline": "cross platform restrict",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T17:50:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bde758aed2af5d15e945585634cd5400771f8d5",
"body": null,
"is_bot": false,
"headline": "don't loop tests",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T17:39:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ed42686449679dce60e2baa4e3420e875fcc578",
"body": "…rom another project",
"is_bot": false,
"headline": "various improvements to serialize library based on read/write needs f…",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T16:58:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91c82b99d0784eb5f8c53c1aa878e571ddbfd3d7",
"body": null,
"is_bot": false,
"headline": "sketch out read function in tests",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T16:14:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80aab9840a97a73b955f95e7783a45d7d94d7283",
"body": "… too for convenience",
"is_bot": false,
"headline": "give the read stream and bit reader default ctors + initialize method…",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T16:12:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "231672539e05b56cb4192b83e921735c0795d028",
"body": null,
"is_bot": false,
"headline": "up to write_object",
"author_name": "Glenn Fiedler",
"author_login": "gafferongames",
"committed_at": "2024-11-14T15:53:57Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 14,
"commits_last_year": 91,
"latest_release_at": "2026-07-25T20:13:17Z",
"latest_release_tag": "v1.5.0",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 10,
"days_since_latest_release": 7,
"mean_days_between_releases": 0.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 15,
"stars": 134,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2024-01-18",
"count": 1
},
{
"date": "2024-06-13",
"count": 1
},
{
"date": "2024-07-05",
"count": 1
},
{
"date": "2024-10-03",
"count": 1
},
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2025-01-20",
"count": 1
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-28",
"count": 1
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-11-12",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 15,
"total_forks": 15
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 149818,
"source_files_sampled": 6,
"oversized_source_files": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 14320
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 16,
"open_issues": 1,
"closed_ratio": 0.75,
"closed_issues": 3,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "gafferongames",
"commits": 128,
"avatar_url": "https://avatars.githubusercontent.com/u/696656?v=4"
},
{
"type": "User",
"login": "rowan-claude",
"commits": 25,
"avatar_url": "https://avatars.githubusercontent.com/u/305107455?v=4"
},
{
"type": "User",
"login": "valverl",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/7373077?v=4"
},
{
"type": "User",
"login": "jparr721",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/17581545?v=4"
},
{
"type": "User",
"login": "Tornamic",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/103134732?v=4"
},
{
"type": "User",
"login": "marcin-serwin",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/12128106?v=4"
},
{
"type": "User",
"login": "VA-GS",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/181415598?v=4"
}
],
"contributors_sampled": 7,
"top_contributor_share": 0.79
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"ci.yml",
"cla.yml",
"nightly-fuzz.yml",
"release-check.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/16 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "19d332e3f6c78743b80a4e453fa4ec0468a6dc87",
"ran_at": "2026-08-02T12:56:30Z",
"aggregate_score": 5.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-08-02T11:00:39Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-26T21:18:24Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 14,
"created_at": "2026-07-18T23:07:40Z",
"last_comment_at": "2026-07-24T20:50:35Z",
"last_comment_author": "rowan-claude"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/mas-bandwidth/serialize",
"host": "github.com",
"name": "serialize",
"owner": "mas-bandwidth"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 57,
"calibrated": 60,
"calibration": "2026-08-02"
}
}
],
"value": 60,
"inputs": {
"security": 55,
"vitality": 82,
"community": 48,
"governance": 51,
"calibration": "2026-08-02",
"engineering": 46,
"ai_readiness": 52,
"weighted_overall_raw": 57
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 82,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 91,
"human_commit_share": 1,
"days_since_last_push": 6,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "91 commits in the last year",
"points": 17.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 91
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 14,
"latest_release_tag": "v1.5.0",
"releases_from_tags": false,
"days_since_latest_release": 7,
"mean_days_between_releases": 0.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "14 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 14
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 48,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"forks": 15,
"stars": 134,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "134 stars",
"points": 34.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 134
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "15 forks",
"points": 9.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 15
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (BSD-3-Clause)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "BSD-3-Clause"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 7,
"top_contributor_share": 0.79
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 79% of commits",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 79
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "7 contributors",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 7
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"merged_prs": 16,
"open_issues": 1,
"closed_issues": 3,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.75,
"closed_unmerged_prs": 4,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "75% of issues closed",
"points": 31.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 75
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "16/20 decided PRs merged",
"points": 24,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 16,
"decided": 20
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 151,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "mas-bandwidth",
"public_repos": 46,
"account_age_days": 1121
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "151 followers of mas-bandwidth",
"points": 15.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 151,
"login": "mas-bandwidth"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "46 public repos, account ~3 yr old",
"points": 18.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 46
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 46,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "weak",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"bitpacker",
"bitpacking",
"bits",
"serialize"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.55,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 14320
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "55 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 29.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 55,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.57,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C++ (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C++"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "57 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 57,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"primary_language": "C++",
"largest_source_bytes": 149818,
"source_files_sampled": 6,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C++ (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C++"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/6 source files over 60KB",
"points": 45.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 6,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [],
"labels": [],
"scores": {},
"primary": null,
"evidence": [],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-08-02T12:56:43.829858Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mas-bandwidth/serialize.svg",
"full_name": "mas-bandwidth/serialize",
"license_state": "standard",
"license_spdx": "BSD-3-Clause"
}