公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 19:43 UTC
openrung / openrung
Internet access is a right, not a privilege.
openrung/openrung 的健康指数为 100 分中的 57 分，处于「中等」区间。 其得分最高的类别是Engineering Quality（77/100），最低的是Security（27/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
57
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
57
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/openrung/openrung/wsscore | v0.2.0 | - | 2 | 0 天前 |
| Go | github.com/openrung/openrung/punchcore | v0.1.0 | - | 1 | 10 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
70
开发活跃度
56中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 2.1/36 | 提交节奏 — 52 周中有 3 周有提交 |
| 18/18 | 提交量 — 最近一年 228 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 228 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 3 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 5 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 0 天前 |
| 27/27 | 发布节奏 — 约每 3.8 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 5 |
| latest_release_tag | volunteer-v0.1.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 0 |
| mean_days_between_releases | 3.8 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
49
流行度与采用
30存在风险
评分方式
| 27.4/60 | 星标 — 50 个星标 |
| 2.5/25 | 复刻 — 3 个复刻 |
| 0/15 | 关注者 — 1 位关注者 |
所用输入
| forks | 3 |
| stars | 50 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
70良好
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（GPL-3.0） |
| 18/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
53
维护者韧性（巴士系数）
10危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
84良好
评分方式
| 46.8/46.8 | 议题解决 — 100% 的议题已关闭 |
| 37.5/38.3 | PR 接受 — 已裁定的 PR 中 94/96 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/11 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 94 |
| open_issues | 0 |
| closed_issues | 2 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 2 |
所有权与托管责任
43存在风险
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 8.2/25 | 所有者影响力 — openrung 有 13 位关注者 |
| 4.6/25 | 既往记录 — 3 个公开仓库，账户约 0 年 |
所用输入
| followers | 13 |
| owner_type | Organization |
| is_verified | — |
| owner_login | openrung |
| public_repos | 3 |
| account_age_days | 36 |
软件包维护
92优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 2 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 0 天前 |
| 12/20 | 版本历史 — 2 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/openrung/openrung/wsscore, github.com/openrung/openrung/punchcore |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 0 |
工程质量
基础的工程与文档实践是否到位？
77
工程实践
68中等
评分方式
| 24/24 | CI 工作流 — 11 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
90优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://openrung.org |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 3 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | reality, vpn, xray-core |
| has_wiki | 否 |
| homepage | https://openrung.org |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
27
安全态势
27危急
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/11 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 19 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 2.7 |
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
66
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 100 次人类提交中有 79 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.79 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — desktop-volunteer/frontend/tsconfig.json, desktop/frontend/tsconfig.json |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 24 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 1/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | 是 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | desktop-volunteer/frontend/tsconfig.json, desktop/frontend/tsconfig.json |
| agent_commit_share | 0.24 |
| toolchain_manifests | desktop-volunteer/go.mod, desktop/go.mod, go.mod, punchcore/go.mod, wsscore/go.mod |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 285 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 59,173 |
| source_files_sampled | 285 |
| oversized_source_files | 0 |
关键数据
50GitHub 星标
1贡献者
228最近 12 个月提交数
0距最近推送天数
5发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 3 ⇿
0Star
3Fork
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
OpenSSF Scorecard 2.7 / 10
2.7综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/11 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 19 existing vulnerabilities detected |
直接依赖 16
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/wailsapp/wails/v2 | v2.12.0 | desktop-volunteer/go.mod |
| Go | openrung | v0.0.0 | desktop-volunteer/go.mod |
| Go | github.com/openrung/openrung/punchcore | v0.0.0 | desktop/go.mod |
| Go | github.com/openrung/openrung/wsscore | v0.0.0 | desktop/go.mod |
| Go | github.com/wailsapp/wails/v2 | v2.12.0 | desktop/go.mod |
| Go | golang.org/x/sys | v0.45.0 | desktop/go.mod |
| Go | openrung | v0.0.0 | desktop/go.mod |
| Go | github.com/gorilla/websocket | v1.5.3 | go.mod |
| Go | github.com/hashicorp/yamux | v0.1.2 | go.mod |
| Go | github.com/jackc/pgx/v5 | v5.6.0 | go.mod |
| Go | github.com/openrung/openrung/punchcore | v0.0.0 | go.mod |
| Go | github.com/openrung/openrung/wsscore | v0.0.0 | go.mod |
| Go | github.com/quic-go/quic-go | v0.60.0 | go.mod |
| Go | golang.org/x/sys | v0.45.0 | go.mod |
| Go | github.com/gorilla/websocket | v1.5.3 | wsscore/go.mod |
| Go | github.com/hashicorp/yamux | v0.1.2 | wsscore/go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"reality",
"vpn",
"xray-core"
],
"is_fork": false,
"size_kb": 2060,
"has_wiki": false,
"homepage": "https://openrung.org",
"languages": {
"Go": 1629849,
"CSS": 34120,
"HTML": 16487,
"Shell": 169298,
"Python": 18045,
"Makefile": 1791,
"Dockerfile": 11385,
"JavaScript": 36942,
"PowerShell": 4248,
"TypeScript": 202405
},
"pushed_at": "2026-07-22T15:41:22Z",
"created_at": "2026-07-04T00:31:00Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T15:45:04Z",
"description": "Internet access is a right, not a privilege.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-3.0",
"default_branch": "main",
"license_spdx_raw": "GPL-3.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "openrung.org",
"name": "OpenRung Foundation",
"type": "Organization",
"login": "openrung",
"company": null,
"location": "United States of America",
"followers": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/294078720?v=4",
"created_at": "2026-06-16T06:23:55Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 36
},
"license": {
"state": "standard",
"spdx_id": "GPL-3.0",
"raw_spdx": "GPL-3.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "volunteer-v0.1.0",
"kind": "other",
"published_at": "2026-07-22T08:18:37Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-07-16T11:35:54Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-07-11T02:15:20Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-09T10:03:16Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-07-07T07:08:46Z"
}
],
"recent_commits": [
{
"oid": "f7f9946cd9b340f273603822335d318cd0a369b4",
"body": "Complete per-relay WSS fleet rollout",
"is_bot": false,
"headline": "Merge pull request #98 from openrung/codex/wss-full-fleet-rollout",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T15:41:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec0e43f24219f0de17def14f60a58148a05c1d8c",
"body": null,
"is_bot": false,
"headline": "Fix WSS rollout secret cleanup and CIDR ordering",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T15:05:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf6c53706d1ac1d1ed0910d7e2c130dd961fe744",
"body": null,
"is_bot": false,
"headline": "Complete per-relay WSS fleet rollout",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T15:05:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4859f61e5a2a330849e0480d7472a537d899612",
"body": null,
"is_bot": false,
"headline": "Add verified WSS front advertisement workflow",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T15:05:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e71eaf745267bb158602bdd429a3d630d02afdd",
"body": null,
"is_bot": false,
"headline": "Add per-relay WSS fleet rollout tooling",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T15:04:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37eefd001f8cb6439bb5b08b8c9f2584f5baf81c",
"body": "…-binary-82f9ab\n\nfix(ci): use shasum on macOS in volunteer desktop release",
"is_bot": false,
"headline": "Merge pull request #96 from openrung/claude/desktop-volunteer-release…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T08:14:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "825bc55890d10f18f76dc7c6773e219ea88b117d",
"body": "feat(wsscore): support SNI-less CloudFront connections",
"is_bot": false,
"headline": "Merge pull request #97 from openrung/codex/wsscore-cloudfront-no-sni",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T07:49:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "459f4f54e78aeafc71991731ca12646a8089f1fd",
"body": null,
"is_bot": false,
"headline": "feat(wsscore): support SNI-less CloudFront connections",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T07:43:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95722b057ea390b36c542c51af0d91a05d01a3a6",
"body": "The \"Fetch and verify xray (unix)\" step runs on both Linux and macOS,\nbut macOS ships shasum, not sha256sum. The macos-14 build job failed\nwith \"sha256sum: command not found\" — `actual` came back empty and the\nchecksum test failed, which would have blocked any volunteer-v* release\nsince the release job needs all three builds.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): use shasum on macOS in volunteer desktop release",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T07:00:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1942d80955c1e87e317fa37a3241874e6f259bcd",
"body": "refactor: extract reusable WSS core module",
"is_bot": false,
"headline": "Merge pull request #95 from openrung/codex/wsscore-module",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T05:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13e0d831f8a66ea08460a7eebb29fe016462e977",
"body": null,
"is_bot": false,
"headline": "refactor: extract reusable WSS core module",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T04:34:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daa368e8c780c3361e3c271cba0bff450f9996ff",
"body": "fix: let direct Xray bind relay port 443",
"is_bot": false,
"headline": "Merge pull request #94 from openrung/codex/wss-xray-bind-capability",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T03:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33d1cfc94aede5f22aff678b0d008f30db0fe2af",
"body": null,
"is_bot": false,
"headline": "fix: let direct Xray bind relay port 443",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T03:05:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83e5b21b0f8cb0f9b2d69df902c526d2152dce0c",
"body": "Add per-relay WSS/CDN fallback",
"is_bot": false,
"headline": "Merge pull request #93 from openrung/codex/per-relay-wss-cdn-fallback",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-22T01:28:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95b1bfdfe221b107e9e5ce050ce9ee4177e16c3f",
"body": null,
"is_bot": false,
"headline": "fix: classify WSS probe failures as transport",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T23:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22dfeac034acc345d1d182107860b8c6249e5ba2",
"body": null,
"is_bot": false,
"headline": "feat: add per-relay WSS CDN fallback",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T23:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f2e5f4b305e7ab5476835a0e49426c55a6d4ae2",
"body": "Broker: prioritize relay reliability in ranking",
"is_bot": false,
"headline": "Merge pull request #92 from openrung/codex/reliability-first-ranking",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T14:09:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09f3fb0342fb289925e9b4a15daa21b1d52940f9",
"body": null,
"is_bot": false,
"headline": "broker: add bounded over-capacity backpressure",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T14:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1708ad62386362a082b2f156f377dd4ff5330149",
"body": null,
"is_bot": false,
"headline": "broker: prioritize relay reliability in ranking",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T11:31:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd653424cbebc77007e21a09beb863441de22f95",
"body": "Raise relay capacity defaults to 75 sessions and 100 Mbps",
"is_bot": false,
"headline": "Merge pull request #90 from openrung/codex/raise-relay-capacity-defaults",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T10:57:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7636dd20a5fcb1d5a89875fc07ed91db095b117a",
"body": null,
"is_bot": false,
"headline": "docs: align relay capacity examples",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T10:52:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a02a64844f3ddf42477239694b3b96bbf86115f8",
"body": "…ision\n\nBroker: emit whole-second relay-list timestamps",
"is_bot": false,
"headline": "Merge pull request #91 from openrung/codex/broker-rfc3339-second-prec…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T10:47:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530c22dbff0d328701feba9ce41a36375b5dba5e",
"body": null,
"is_bot": false,
"headline": "test: guard all relay-list timestamps",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T10:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dac6998e1dcc761de204ad4c95a59fb33aa28fdd",
"body": null,
"is_bot": false,
"headline": "broker: emit whole-second relay timestamps",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T10:07:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2039fe734ed7321ffde8b8082b24379ced37b08",
"body": null,
"is_bot": false,
"headline": "relay: raise advertised capacity defaults",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T08:48:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c60bbade84bf8b9db45999a9bf63babd22ec706",
"body": "desktop: stabilize and expose the local proxy endpoint",
"is_bot": false,
"headline": "Merge pull request #89 from openrung/codex/fix-stable-proxy-endpoint",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T03:03:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "955d79980b00b0110efd134f2bad1e4c061111f7",
"body": "Signed-off-by: openrung-admin <admin@openrung.org>",
"is_bot": false,
"headline": "desktop: retry transient proxy port resolution failures",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T02:57:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ae3c413aa0a466b343e17e23f7bb3981aa9fd66",
"body": "Signed-off-by: openrung-admin <admin@openrung.org>",
"is_bot": false,
"headline": "desktop: stabilize and expose the local proxy endpoint",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T02:41:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "343673420328b675fc8be99dd8deda39fd7df6cf",
"body": "Broker: honor aggregated application connection counts",
"is_bot": false,
"headline": "Merge pull request #88 from openrung/codex/broker-connection-count",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T01:26:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cddc13d1f06d17ee06631b284dde486030b31af",
"body": null,
"is_bot": false,
"headline": "broker: honor aggregated application connection counts",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-21T00:54:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f847d193effa417e873fec7710db8bb5c67e3c4c",
"body": "Stable relay identity: derive relay_id from a proven Ed25519 key",
"is_bot": false,
"headline": "Merge pull request #85 from openrung/worktree-relay-stable-identity",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T23:30:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50de6c39753f987b4a49a002e6e6fa3b8e166458",
"body": null,
"is_bot": false,
"headline": "Harden stable relay identity lifecycle",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T15:13:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c2881825d62b6929bfde3e1d993cd1f92336c02",
"body": "- deploy: stop tracing the identity seed (an Ed25519 private key) into the\n persisted bootstrap log (set +x before minting it)\n- hub: a stale tunnel session re-registering a shared stable ID no longer\n clobbers the newer session in the punch registry (claimTunnel CAS)\n- broker: drop the misleading\n[…]\n the desktop app; read OPENRUNG_IDENTITY_SEED in the relay binary directly\n- docs: state precisely what the tunnel proof binds and its residual\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Address adversarial review: seed leak, hub registry, clock skew, docs",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T14:26:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d6f1a1f0c039da9beca1cb2a9e5778384508f685",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Stable relay identity: derive relay_id from a proven Ed25519 key",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T13:53:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "35cc256d321e47ff04f9d4697331cbe30b6d6dc8",
"body": "…range-108b07\n\nbroker: roll up application_connection events instead of storing them",
"is_bot": false,
"headline": "Merge pull request #84 from openrung/claude/telemetry-dashboard-time-…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T12:11:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2b02bc2dd0cf1b22848c3dccfd5b7bf2c7684e3",
"body": null,
"is_bot": false,
"headline": "broker: scrub legacy app telemetry rollups",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T08:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9e47529203d6bcbce0d8a06e7e9a5c9330e3fba",
"body": "The telemetry dashboard's 24h and 7d windows have been timing out at the\n30s query limit: application_connection events reached 95% of all rows\n(3.3M/day) while feeding only the top-applications panel, and their\npayload pairs the client's IP with every destination it visits.\n\nNeither store keeps the\n[…]\nces so partitions written before this\nchange stay cheap to skip. Legacy rows already in either store are\nskipped on read and shed by compaction.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "broker: roll up application_connection events instead of storing them",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-20T01:59:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "83a2bf24efafbd968e4a9e91b253fe1f6dc01218",
"body": "…-7f07e0\n\nRepo cleanup: drop dead code, refresh stale docs",
"is_bot": false,
"headline": "Merge pull request #83 from openrung/claude/repo-optimization-cleanup…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-19T23:44:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfedd2f2092d736f2f6503ddf18ee5ba2691d01f",
"body": "Dead code (confirmed by deadcode + staticcheck, zero callers anywhere\nincluding the desktop modules and the mobile repo's punchcore usage):\n- Identity.complete in internal/relayruntime/engine\n- ringBuffer.reset in desktop/vpnservice and desktop-volunteer/volunteerservice\n- desktop StatusChip.tsx: no\n[…]\npp modules (and node_modules) from the server image build contexts —\nall three Dockerfiles COPY . . but only build cmd/ + internal/ +\npunchcore.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Repo cleanup: drop dead code, refresh stale docs",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T10:34:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ad8f6a084b42c1049a57fed17feb0579dfe35951",
"body": "Move website out to the private openrung/website repo",
"is_bot": false,
"headline": "Merge pull request #82 from openrung/claude/extract-website",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T05:07:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbd7aa1e2bc8e1f2613c67490b30ce5bd7c40b82",
"body": "The landing page, privacy policy, and site-only assets now live in\nopenrung/website and deploy to the Cloudflare Pages project\nopenrung-site. Developer docs stay in docs/, and openrung-mark.svg\nstays as the repo's brand asset (README logo, mirrored by the desktop\nLogo component).\n\ndocs/CNAME was a GitHub Pages artifact; the site is served by\nCloudflare Pages, so it goes too.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Move website out to the private openrung/website repo",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T04:17:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "34754a2e1dd4f352a36353d5e86f20f580bf5584",
"body": "Redesign how-it-works diagram: fix AI artifacts, add Great Wall backdrop",
"is_bot": false,
"headline": "Merge pull request #81 from openrung/claude/index-image-styling-69f5ec",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T04:01:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d924c2fcc86c68823f6b298199dc5ca9c262f9c",
"body": "…l backdrop\n\n- Remove the heartbeat pulse animation on the relay laptop (odd/AI-generated look)\n- Widen the VLESS+REALITY+Vision pill so \"Vision\" no longer overflows\n- Drop the unnecessary rounded card around the client phone\n- Replace the compass broker icon with a server-rack icon\n- De-emphasize t\n[…]\nion to\n \"OpenRung operated relays and community volunteers\"\n- Replace the abstract hatch-line background in the restricted-network\n zone with a Great Wall silhouette (crenellated wall + watchtowers)",
"is_bot": false,
"headline": "Redesign how-it-works diagram: remove AI-ish artifacts, add Great Wal…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T03:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9c5a3e92474e4e5f89a32e7c9a9f7fe81d4db5a",
"body": "Add public privacy policy for app review",
"is_bot": false,
"headline": "Merge pull request #80 from openrung/codex/apple-privacy-policy",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T02:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84f750b76f885b4f9f4207eeaa669e804280364f",
"body": null,
"is_bot": false,
"headline": "Add public privacy policy",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-17T02:54:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6691cd40ee89ab3c383938b6501e547cb654954",
"body": "desktop: release client version 0.1.3",
"is_bot": false,
"headline": "Merge pull request #79 from openrung/codex/desktop-client-0.1.3",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T09:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5a0bdd565ab5dc22cdfbb58b2540bf17ec264e2",
"body": "Review follow-ups on the 0.1.3 version wiring.\n\nThe -X assignment that carries the version into the Go binary names\nopenrung/internal/client.appVersion as a string, and nothing checked that\nthe symbol still resolves. The linker silently ignores -X for a symbol it\ncannot find: the build succeeds and \n[…]\ncheckout the\nscript skipped main() and exited 0 without building, leaving the\npackaging scripts to ship whatever stale binary was in build/bin.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "desktop: guard the version injection contract, dedupe the version rule",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T09:36:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f2aa9e3e20a4f0e19f2775b5567bc5bb30c44ff7",
"body": null,
"is_bot": false,
"headline": "desktop: release client version 0.1.3",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T08:59:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8db86581a138415bb84dd7170b96763e6a2c92ef",
"body": "…d-8472d3\n\ndesktop: rank relay ladder by client-measured TCP latency",
"is_bot": false,
"headline": "Merge pull request #78 from openrung/claude/desktop-auto-connect-spee…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T07:46:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b9c6a417ab71cddbd825bc78ee242a4c84ab4aa",
"body": "Add independent component versioning",
"is_bot": false,
"headline": "Merge pull request #77 from openrung/codex/component-versioning",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T07:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fb4bf9e9143a2299d08bf8bdf9a330403580521",
"body": "Port of the mobile RelayRanker (openrung-mobile-app 7939fba, PR #45) to\nthe desktop client, so all three clients pick a relay the same way.\n\nThe broker orders relays by a composite score (load headroom, success\nrate, latency, speed) from its own vantage; the one signal it cannot know\nis the connecti\n[…]\ngreen across desktop and root; the new\ntests were mutation-checked (demote-then-rank, tail-before-failed, and\nraw-latency-sort each fail them).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(desktop): rank relay ladder by client-measured TCP latency",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T06:17:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c6acd2a9a55bf4862b5727bdb0cc35b4dc982442",
"body": "Two release-path defects found reviewing the component-versioning work.\n\nsha-* was documented as immutable but the release build mutated it. A\nrelease build of a commit main already built injects a different\n-X main.version, so it produces different bits (verified: same commit\nbuilt as main vs as a \n[…]\nacts. Latent until now only because no\nvolunteer-v* tag exists yet. v[0-9]* keeps the existing v0.1.x tags valid\nand matches desktop tags only.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Keep sha-* immutable and stop v* swallowing volunteer-v*",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T05:30:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b22af346d35d0449f5c732da098a59f98734559d",
"body": null,
"is_bot": false,
"headline": "Add independent component versioning",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T05:12:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed8c8cbac9146557d0b895c7fa2d92a701e06d04",
"body": "dashboard: colour relay names by node_class",
"is_bot": false,
"headline": "Merge pull request #76 from openrung/worktree-dashboard-node-class",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T04:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a03268b42ae9aea7c40bc7e3c3546dd79d227642",
"body": "Snapshot broker-attested node classes onto server-owned telemetry records so historical dashboard rows stay classified after relay leases expire. Persist and aggregate the field in both JSONL and Postgres paths, keep active descriptors as a legacy fallback, and add visible FND/VOL markers for non-colour identification.",
"is_bot": false,
"headline": "dashboard: retain relay class with telemetry",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T04:32:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4185aa2608cb47219408f470b61ccce5c032da1",
"body": "Show a relay's broker-attested class by colouring its name — bright green for\nfoundation, orange for volunteer — rather than appending \"(foundation)\" /\n\"(volunteer)\" to every relay name. Same four views: the top-relay and speed-test\ntables, the active-by-relay ranking, and the relay column of recent\n[…]\n,226,123)) and four orange volunteer spans (rgb(255,157,77)) — one per\nview — with the city ranking uncoloured and tooltips carrying id · class.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "dashboard: colour relay names by node_class instead of a text suffix",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T03:43:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6d8a880b68ca71bfcdac3823706c73f22253884f",
"body": "The telemetry dashboard named relays by label (falling back to the relay ID)\nwith no indication of who operates them, even though the broker now attests a\nnode_class. Render the class after the name everywhere a relay is named:\n\n sleepy-falcon (foundation) fast-lizard (volunteer)\n\nCovers all f\n[…]\nses, the city ranking carries none, and\nthe rendered dashboard shows \"sleepy-falcon (foundation)\" / \"fast-lizard\n(volunteer)\" in all four views.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "dashboard: show relay node_class beside every relay name",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T01:56:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c4b2c650c7de9137e958562e21a9893aab969b95",
"body": "…6391\n\nRevert \"Add shellcheck CI gate for deploy scripts\"",
"is_bot": false,
"headline": "Merge pull request #75 from openrung/revert-73-claude/great-joliot-2a…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T01:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d2357995103cbe1cd214e97d5b50c4e4e7784e0",
"body": null,
"is_bot": false,
"headline": "Revert \"Add shellcheck CI gate for deploy scripts\"",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T01:30:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f02f70cbb7701a3832e0d137d3eec6fde0c4ca6",
"body": "Add shellcheck CI gate for deploy scripts",
"is_bot": false,
"headline": "Merge pull request #73 from openrung/claude/great-joliot-2a6391",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T01:17:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8402a13408f564ea3b68c59effef9bf0c214c8f",
"body": "…-37871d\n\nReimplement foundation-up.sh with security fixes (redo of #68)",
"is_bot": false,
"headline": "Merge pull request #72 from openrung/claude/pr68-security-reimplement…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-16T01:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbfbff9d2b38be23e04096d91ebe97bce98237d8",
"body": null,
"is_bot": false,
"headline": "Reduce foundation deploy state space",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T15:23:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d977d0bdc85220d83eba511e395bf4ecb2ccd03",
"body": "- unset TOKEN before assigning it: a caller who exported a generic\n TOKEN would otherwise make the script's variable inherit the export\n attribute, handing the Foundation bearer to every child process\n (ssh, aws, ssh-keygen, lightsail-up.sh). Test-covered: a child\n spawned after load_token sees \n[…]\nes it on failure too — the\n install-session EXIT trap does not exist yet at those points and the\n tmp holds the preserved Reality private key.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Address Codex round 2: TOKEN export leak, backup guard, stranded tmp",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T13:01:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1a41056bbeee5e55cd1aadd055e01aa248169a7f",
"body": "Codex's four findings on the previous revision, all confirmed and fixed:\n\n- convert destroyed existing relay configuration: it wrote a fixed\n five-variable env file and then deleted the legacy one. It now stages\n the host's existing OPENRUNG_* settings on the host itself (canonical\n file + legacy\n[…]\nchmods\na pre-existing parent directory; and the create wait loop surfaces the\nlast ssh error instead of blaming the bootstrap for auth failures.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Address Codex review: preserve config, harden token/TOFU/rollback paths",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T10:40:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ecee2b75cc10392ecb3fc1a1f03dc338bbcd8d49",
"body": "Reviews of PRs #68 and #72 both called out that nothing lints the deploy\nshell scripts. Add a workflow that runs a version+sha256-pinned shellcheck\n(v0.11.0) over every deploy/**/*.sh on each PR and push to main, failing\nloudly if the file set comes up empty.\n\nSC2029 (client-side expansion in ssh co\n[…]\nng rather than a bash array because\nexpanding an empty array under set -u errors on bash 3.2, which is what\nstock macOS runs these scripts with.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add shellcheck CI gate for deploy scripts",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T09:36:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49b94be62e145d6965117998cf67005c6f81352e",
"body": "Same tooling as the reverted #68 — create/convert/update for Foundation\nrelays, wrapping lightsail-up.sh — with the issues from its security\naudit fixed:\n\n- Default the broker URL to the direct TLS origin\n (broker-origin.openrung.org) instead of the CloudFront front, so the\n Foundation bearer is o\n[…]\nnical path and remove it after\n the relay verifies, print rollback commands on failure, and replace\n the line-number-fragile usage extraction.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Reimplement foundation-up.sh with security fixes (redo of #68)",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T09:07:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0b9251ca21df4d09e560728e1fcfb97a319cbb73",
"body": "…y-helper\n\nRevert \"Add foundation-up.sh to automate Foundation relay provisioning\"",
"is_bot": false,
"headline": "Merge pull request #71 from openrung/revert-68-deploy/foundation-rela…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T08:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c0b5a58cc4fd3af4a6b5ddaf0a7964ad947df58",
"body": null,
"is_bot": false,
"headline": "Revert \"Add foundation-up.sh to automate Foundation relay provisioning\"",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T08:35:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dfa16f8df2472e9e79d01821b3d1c1aa9bed722",
"body": "Add foundation-up.sh to automate Foundation relay provisioning",
"is_bot": false,
"headline": "Merge pull request #68 from openrung/deploy/foundation-relay-helper",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T07:41:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "792a6cdfd1ea17e8a1518a1b3ba82d86da33bb2c",
"body": "Make relay_version canonical in broker API",
"is_bot": false,
"headline": "Merge pull request #69 from openrung/codex/relay-version-api",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T04:42:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbdaf0be5dd225bbbf569cf47e2182cd365f113c",
"body": null,
"is_bot": false,
"headline": "Make relay_version canonical in broker API",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T03:55:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad7ed27dd98287a3aac15e8069608a892be2e9e2",
"body": "A Foundation relay has always needed a manual second step. lightsail-up.sh\nrefuses registration tokens because Lightsail retains user-data, so the token\nmust be installed post-boot in a root-owned mode-0600 env file and the container\nrecreated with --env-file. That step was hand-run over SSH each ti\n[…]\nn every relay.\n\nLegacy openrung-volunteer container and volunteer.env names are detected, so\nhosts predating the rename need no manual cleanup.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add foundation-up.sh to automate Foundation relay provisioning",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-15T03:15:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "77788c89f48a9cd3932ef6c267a034e225e35d2b",
"body": "Remove legacy relay write routes",
"is_bot": false,
"headline": "Merge pull request #67 from openrung/codex/remove-legacy-relay-routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T23:14:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d660b92c1f5ea26dfdfaca8ca3726aeb8ecf514",
"body": null,
"is_bot": false,
"headline": "Remove unused broker HTTP status field",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T13:55:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c659f3c6c8390f3336b107099c008bdaf82ce832",
"body": null,
"is_bot": false,
"headline": "Remove legacy relay write routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T13:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73ff6bafc27d6210d2683e9a60132775da40e712",
"body": "Retire openrung-volunteer image",
"is_bot": false,
"headline": "Merge pull request #66 from openrung/codex/remove-volunteer-image",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T07:17:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d002d046cd0d5c4f6a14348557a1fb7f153f532",
"body": null,
"is_bot": false,
"headline": "Retire legacy volunteer image",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T07:13:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62bd11c80cfa797018bcf57856cec49cd05ea935",
"body": "Use canonical relay image for provisioning",
"is_bot": false,
"headline": "Merge pull request #65 from openrung/codex/use-canonical-relay-image",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T06:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a2ef5c7bcbd2483a5c2d2ef3a0841c4dc3107ec",
"body": null,
"is_bot": false,
"headline": "Use canonical relay image for provisioning",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T06:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c65f02c65dc044ed2e72bb91b77a7ba738e8493",
"body": "Canonicalize relay source and deployment artifacts",
"is_bot": false,
"headline": "Merge pull request #64 from openrung/codex/relay-source-paths",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T06:15:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c5662ebc48546512ffa44ad91c17479ab46e8b8",
"body": null,
"is_bot": false,
"headline": "Complete relay artifact rename",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T06:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f192c78e947fbc9166ba5a5657fb38d23edae9f0",
"body": null,
"is_bot": false,
"headline": "Rename relay source paths",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T05:29:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0779981c0a08b78ed479d09dda700e899d8cda3",
"body": "Migrate direct relays to canonical broker routes",
"is_bot": false,
"headline": "Merge pull request #63 from openrung/codex/direct-relay-canonical-routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T05:23:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a03c2bf7d6313e8ff2863bc787c915c74ba9714c",
"body": null,
"is_bot": false,
"headline": "Migrate direct relays to canonical broker routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T05:16:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cfa1c88fd0cb9da49eac1766cf9127b9c87c5eb",
"body": "Migrate relay hub to canonical broker routes",
"is_bot": false,
"headline": "Merge pull request #62 from openrung/codex/relayhub-canonical-routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T04:21:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b93dc528565740ee243105807fa9657e2a940184",
"body": null,
"is_bot": false,
"headline": "Migrate relay hub to canonical broker routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T04:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c413acd26a5112f8cf58d48c83881d9bb96c84d",
"body": "Add canonical relay write API routes",
"is_bot": false,
"headline": "Merge pull request #61 from openrung/codex/relay-api-aliases",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T03:25:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5036e16a6ba3ed8f67ceb0d7906e018e2d5b7087",
"body": null,
"is_bot": false,
"headline": "Add canonical relay write API routes",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T03:16:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88eef1e505fdb1dc08ab3746d895ff6f84ee03a2",
"body": "Use relay as the generic runtime terminology",
"is_bot": false,
"headline": "Merge pull request #60 from openrung/codex/relay-terminology",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T02:47:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69203a349a5cf3d3f705fdd708606c9ea889135e",
"body": null,
"is_bot": false,
"headline": "refactor: use relay as the generic runtime term",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-14T01:41:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f31bc143bba03341d2ca9eb857cd538cace86e34",
"body": "deploy(broker): keep anonymous-registration opt-in in the env file, not a docker -e flag",
"is_bot": false,
"headline": "Merge pull request #59 from openrung/broker-env-file-anon-flag",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T13:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d27c0e4f0aced7bc3b481388e0aa241c1ccde3aa",
"body": "…ot a docker -e flag\n\nThe broker fails closed at startup (cmd/broker/main.go): it refuses to run\nwithout either OPENRUNG_VOLUNTEER_TOKEN or\nOPENRUNG_ALLOW_ANONYMOUS_REGISTRATION=true. Passing the anonymous opt-in as an\nad-hoc `docker run -e ...` means any redeploy that forgets the flag crash-loops.\n\n[…]\nn into\n broker.env and applied via --env-file (it already was; comment only).\n\nDeploy-layer only. The Go fail-closed startup gate is unchanged.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "deploy(broker): keep anonymous-registration opt-in in the env file, n…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T12:58:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ec6d8b0b9799e234bfbc15690a71928731fb23e4",
"body": "broker: document end-to-end TLS for the CloudFront front origin leg",
"is_bot": false,
"headline": "Merge pull request #58 from openrung/broker-origin-tls-docs",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T09:38:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7d50664ee603bf7066f2e59569425b99f82caa0",
"body": "…ble)\n\nHarden the token-test recipe (PR review):\n- mktemp instead of the fixed /dev/shm/ft.hdr — root-owned, 0600, unpredictable\n name, so no pre-creatable/symlinkable path in a world-writable dir (umask can't\n repair an existing file).\n- trap ... EXIT (and INT/TERM) so the file is removed however\n[…]\no it uses mktemp + rm.\nVerified live: mktemp file is 0600/root, EXIT trap removes it (incl. on error),\nwith-token 400 / no-token 403 unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(origin-tls): safe temp-credential handling (mktemp + trap, porta…",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T09:03:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3e36c8627fd217c750bb8f65a341d5b6f62de60e",
"body": "awk -F= '...{print $2}' truncates a token containing '=' (e.g. base64 padding)\nat the first '=', yielding a wrong token and a misleading 403 that would falsely\nimplicate CloudFront (the broker does not enforce hex-only tokens). Strip only\nthe first NAME= prefix with sed, preserving the rest of the v\n[…]\nerbatim.\nVerified: OPENRUNG_FOUNDATION_TOKEN=abc== -> \"Bearer abc==\" (awk gave \"abc\"),\nand the live 400/403 discriminating result is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(origin-tls): token extraction must preserve '=' in the value",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T08:58:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "233093ddc1f5d28198d8721b8873e9e6ea0d97aa",
"body": "Correct a factual error (PR review): the runbook claimed CloudFront gives the\norigin no trustworthy per-viewer signal, so per-edge keying was framed as an\nunavoidable limitation. Wrong. AllViewerExceptHostHeader already forwards\nCloudFront-Viewer-Address (viewer ip:port) + the CloudFront-Viewer-* su\n[…]\nst it only after authenticating the request came via\nCloudFront (shared-secret origin header, or lock :443 to CloudFront origin-facing\nranges).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(origin-tls): per-viewer IS achievable via CloudFront-Viewer-Address",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T08:52:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6d63268c04027985df1e861be9511cc673f60c6e",
"body": "…residual\n\nThe follow-up heading overclaimed \"per-client granularity RESOLVED\" (PR review).\nThe fix keys on the unspoofable CloudFront EDGE IP, i.e. it restores pre-proxy\nper-edge behavior, not per-viewer: clients sharing an edge still share its\n2 req/s / burst-30 bucket and telemetry identity. Reti\n[…]\nis the forgeable client-appended XFF), and document the residual —\nespecially under mass failover, where many clients funnel through few edges.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(origin-tls): correct \"per-client resolved\" -> per-edge parity + …",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T08:29:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c35f5dced49e00603d4382db51ade065d5557297",
"body": "The prior recipe used FT=… + curl -H \"Authorization: Bearer $FT\" (PR review):\nthe assignment can enter shell history and the expanded header can appear in\nprocess argv (curl warns argv isn't reliably hidden). Replace with a token-safe\nrecipe: read the token file->file via awk into a private tmpfs he\n[…]\n a hidden-prompt (read -rs + printf builtin)\nvariant for off-box use. Verified the -H @file path still yields 400 (with\ntoken) / 403 (without).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(origin-tls): don't expose the Foundation token in the verify recipe",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T08:26:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e530c6ba6df381b4a0a450a618aad3cbcf15de25",
"body": "The committed Caddyfile comments described stale state (PR review): the\nclient-IP comment read as if loopback trust were a future \"when\", and the header\ncomment framed AllViewer ambiguously. Update to present tense —\nOPENRUNG_TRUSTED_PROXY_CIDRS=127.0.0.1/32,::1/128 IS set on the broker, so the\nforw\n[…]\n named only\nas a \"do NOT switch back\" warning). Comments-only; re-synced to the box so the\ncommitted file still matches deployed byte-for-byte.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(caddyfile): comments match resolved/live state",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T08:11:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3807d1dcd11a1a3ef89c7bd59888a798252b7510",
"body": "The `POST {}` -> 400 `public_host is required` check did not prove the\nAuthorization (Foundation token) header survives CloudFront -> origin: prod\nallows anonymous registration, so an unauthenticated request returns the same\n400 even if the token were stripped (PR review).\n\nReplace it with a discrim\n[…]\n2026-07-13. Added a no-secret cross-check via the Caddy access log\n(request.headers.Authorization = [\"REDACTED\"], value never written to disk).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(origin-tls): fix false-positive token-forwarding verification",
"author_name": "openrung-admin",
"author_login": "openrung-admin",
"committed_at": "2026-07-13T08:08:11Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 5,
"commits_last_year": 228,
"latest_release_at": "2026-07-22T08:18:37Z",
"latest_release_tag": "volunteer-v0.1.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 3,
"days_since_latest_release": 0,
"mean_days_between_releases": 3.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/openrung/openrung/wsscore",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/openrung/openrung/wsscore",
"is_deprecated": false,
"latest_version": "v0.2.0",
"repository_url": "https://github.com/openrung/openrung",
"versions_count": 2,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-22T07:49:55Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
},
{
"name": "github.com/openrung/openrung/punchcore",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/openrung/openrung/punchcore",
"is_deprecated": false,
"latest_version": "v0.1.0",
"repository_url": "https://github.com/openrung/openrung",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-12T03:53:24Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 3,
"stars": 50,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-07-19",
"count": 1
},
{
"date": "2026-07-20",
"count": 2
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"desktop-volunteer/frontend/tsconfig.json",
"desktop/frontend/tsconfig.json"
],
"toolchain_manifests": [
"desktop-volunteer/go.mod",
"desktop/go.mod",
"go.mod",
"punchcore/go.mod",
"wsscore/go.mod"
],
"largest_source_bytes": 59173,
"source_files_sampled": 285,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"desktop-volunteer/go.mod",
"desktop/go.mod",
"go.mod",
"punchcore/go.mod",
"wsscore/go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/wailsapp/wails/v2",
"manifest": "desktop-volunteer/go.mod",
"ecosystem": "go",
"version_constraint": "v2.12.0"
},
{
"name": "openrung",
"manifest": "desktop-volunteer/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/openrung/openrung/punchcore",
"manifest": "desktop/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/openrung/openrung/wsscore",
"manifest": "desktop/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/wailsapp/wails/v2",
"manifest": "desktop/go.mod",
"ecosystem": "go",
"version_constraint": "v2.12.0"
},
{
"name": "golang.org/x/sys",
"manifest": "desktop/go.mod",
"ecosystem": "go",
"version_constraint": "v0.45.0"
},
{
"name": "openrung",
"manifest": "desktop/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/hashicorp/yamux",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.2"
},
{
"name": "github.com/jackc/pgx/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.6.0"
},
{
"name": "github.com/openrung/openrung/punchcore",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/openrung/openrung/wsscore",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/quic-go/quic-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.60.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.45.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "wsscore/go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/hashicorp/yamux",
"manifest": "wsscore/go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.2"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 94,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "openrung-admin",
"commits": 242,
"avatar_url": "https://avatars.githubusercontent.com/u/294067612?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"broker-image.yml",
"desktop-frontend.yml",
"desktop-release.yml",
"go-checks.yml",
"punchcore-tag.yml",
"relay-image.yml",
"relayhub-image.yml",
"uptime.yml",
"volunteer-desktop-release.yml",
"volunteer-frontend.yml",
"wsscore-tag.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/11 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "19 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f7f9946cd9b340f273603822335d318cd0a369b4",
"ran_at": "2026-07-22T19:43:28Z",
"aggregate_score": 2.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T18:52:40Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T15:41:17Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/openrung/openrung",
"host": "github.com",
"name": "openrung",
"owner": "openrung"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 27,
"vitality": 70,
"community": 49,
"governance": 53,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 228,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "228 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 228
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 5,
"latest_release_tag": "volunteer-v0.1.0",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 3.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 49,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"forks": 3,
"stars": 50,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "50 stars",
"points": 27.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 50
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-3.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-3.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"merged_prs": 94,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "94/96 decided PRs merged",
"points": 37.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 94,
"decided": 96
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/11 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"followers": 13,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "openrung",
"public_repos": 3,
"account_age_days": 36
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "13 followers of openrung",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 13,
"login": "openrung"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~0 yr old",
"points": 4.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"packages": [
"github.com/openrung/openrung/wsscore",
"github.com/openrung/openrung/punchcore"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "2 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 2
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "11 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 11
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"reality",
"vpn",
"xray-core"
],
"has_wiki": false,
"homepage": "https://openrung.org",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://openrung.org",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 27,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 2.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/11 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "19 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.79,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "79 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 79,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"desktop-volunteer/frontend/tsconfig.json",
"desktop/frontend/tsconfig.json"
],
"agent_commit_share": 0.24,
"toolchain_manifests": [
"desktop-volunteer/go.mod",
"desktop/go.mod",
"go.mod",
"punchcore/go.mod",
"wsscore/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "desktop-volunteer/frontend/tsconfig.json, desktop/frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "desktop-volunteer/frontend/tsconfig.json, desktop/frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "24 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 24,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 59173,
"source_files_sampled": 285,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/285 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 285,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T19:43:45.361492Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/openrung/openrung.svg",
"full_name": "openrung/openrung",
"license_state": "standard",
"license_spdx": "GPL-3.0"
}