公开记录存在风险
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-28 09:45 UTC
pdfrg / must
MUSic TUI - local music player and subsonic/navidrome client, with albumart in the terminal
pdfrg/must 的健康指数为 100 分中的 43 分，处于「存在风险」区间。 其得分最高的类别是Vitality（67/100），最低的是Community & Adoption（24/100）。 最近一次更新在 8 天前。 近期的大部分工作由 1 位贡献者完成。
43
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
43
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/pdfrg/must | v0.2.0 | - | 3 | 8 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
67
开发活跃度
51中等
评分方式
| 28.8/36 | 推送新近度 — 最近一次推送于 8 天前 |
| 4.2/36 | 提交节奏 — 52 周中有 6 周有提交 |
| 17.7/18 | 提交量 — 最近一年 92 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 92 |
| human_commit_share | 1 |
| days_since_last_push | 8 |
| active_weeks_last_year | 6 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 3 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 7 天前 |
| 27/27 | 发布节奏 — 约每 11.9 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 3 |
| latest_release_tag | v0.2.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 7 |
| mean_days_between_releases | 11.9 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
24
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 2 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 2 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
28
维护者韧性（巴士系数）
10危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
1危急
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 0/38.3 | PR 接受 — 没有已裁定的拉取请求或无数据 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
已排除计分（无数据或不适用）：议题解决, PR 接受。 其余权重已重新归一化。
所有权与托管责任
27危急
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 0/25 | 所有者影响力 — pdfrg 有 0 位关注者 |
| 11.5/25 | 既往记录 — 2 个公开仓库，账户约 3 年 |
所用输入
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | pdfrg |
| public_repos | 2 |
| account_age_days | 1,459 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
92优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 8 天前 |
| 12/20 | 版本历史 — 3 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/pdfrg/must |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 8 |
工程质量
基础的工程与文档实践是否到位？
64
工程实践
50中等
评分方式
| 24/24 | CI 工作流 — 2 个工作流 |
| 0/24 | 存在测试 |
| 16/16 | Linter 配置 — .golangci.yml |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard：CI-Tests — 无数据 |
所用输入
| has_ci | 是 |
| has_tests | 否 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。
文档
85优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 6 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | bubbletea, golang, music-player, omarchy-linux, subsonic-client, tui |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
26
安全态势
26危急
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 无数据 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 1.5/7.5 | Vulnerabilities — 8 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 2.6 |
已排除计分（无数据或不适用）：ci_tests。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
55
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 92 次人类提交中有 90 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.978 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 0/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .golangci.yml |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 92 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 否 |
| lockfiles | go.sum |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
99优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 54.3/55 | 可控的文件大小 — 采样的 76 个源文件中有 1 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 65,239 |
| source_files_sampled | 76 |
| oversized_source_files | 1 |
关键数据
2GitHub 星标
1贡献者
92最近 12 个月提交数
8距最近推送天数
3发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 2.6 / 10
2.6综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 不适用 | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 2 | Vulnerabilities | 8 existing vulnerabilities detected |
直接依赖 16
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | charm.land/bubbles/v2 | v2.1.0 | go.mod |
| Go | charm.land/bubbletea/v2 | v2.0.6 | go.mod |
| Go | charm.land/lipgloss/v2 | v2.0.3 | go.mod |
| Go | github.com/Microsoft/go-winio | v0.6.2 | go.mod |
| Go | github.com/adrg/xdg | v0.5.3 | go.mod |
| Go | github.com/blacktop/go-termimg | v0.1.26 | go.mod |
| Go | github.com/charmbracelet/x/ansi | v0.11.7 | go.mod |
| Go | github.com/dhowden/tag | v0.0.0-20240417053706-3d75831295e8 | go.mod |
| Go | github.com/go-ole/go-ole | v1.3.0 | go.mod |
| Go | github.com/moutend/go-wca | v0.3.0 | go.mod |
| Go | github.com/muesli/termenv | v0.16.0 | go.mod |
| Go | github.com/pelletier/go-toml/v2 | v2.3.1 | go.mod |
| Go | github.com/sahilm/fuzzy | v0.1.2 | go.mod |
| Go | golang.org/x/term | v0.43.0 | go.mod |
| Go | gonum.org/v1/gonum | v0.17.0 | go.mod |
| Go | modernc.org/sqlite | v1.50.1 | go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"bubbletea",
"golang",
"music-player",
"omarchy-linux",
"subsonic-client",
"tui"
],
"is_fork": false,
"size_kb": 8984,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 580292,
"Makefile": 1843
},
"pushed_at": "2026-07-19T23:20:57Z",
"created_at": "2026-05-13T19:45:47Z",
"owner_type": "User",
"updated_at": "2026-07-19T23:20:43Z",
"description": "MUSic TUI - local music player and subsonic/navidrome client, with albumart in the terminal",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "pdfrg",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/110258935?v=4",
"created_at": "2022-07-29T19:27:14Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 1459
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-21T03:36:31Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-03T23:03:32Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-27T07:49:46Z"
}
],
"recent_commits": [
{
"oid": "df7410a8c84e938e5949bcce77e7fc6b22d70f38",
"body": "…t random'",
"is_bot": false,
"headline": "fix: respect source arg (local/subsonic/temp) when auto-starting 'mus…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T23:18:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b09ac41a9787f4c12428b4f73b2f901fb1422233",
"body": "Three changes to fix nowplaying widget text appearing in wrong position:\n\n- model.go: remove renderAlbumArtAfterDelay from Init; logo only\n appears after WindowSizeMsg so text renders before art on startup\n- update_playback.go: save cursor at bottom of screen (matching\n renderer's s.cur tracking) \n[…]\nlbum art space (contentWidth + padding)\n unconditionally via stable canShowArt flag instead of gating on\n whether art bytes happen to be loaded. Eliminates layout shift\n when art arrives mid-flight",
"is_bot": false,
"headline": "fix: synchronize art placement with text layout to prevent cursor drift",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T23:09:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c924739a3f28bee0c0b5ef9e14a44868d4ec45d",
"body": "…eplaygain-data-per-file property",
"is_bot": false,
"headline": "fix: query mpv metadata for replaygain tags instead of non-existent r…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T17:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fe01180d53c32c4b583cf1e812b455d3c384919",
"body": "Only show year in parentheses when Year > 0, matching the pattern\nused everywhere else in the codebase.",
"is_bot": false,
"headline": "fix: guard year display in nowplaying widget and ctl search results",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T16:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e84e6d75cd4dedb17e07c8f73263cdfff48f596",
"body": "Adds:\n- DB: RandomAlbumTracks() selects a random album from the local library\n- TUI: 'A' keybinding to play a random album from a uniformly chosen source\n- CLI/IPC: 'must random [local|subsonic|temp]' command with auto-start\n- Subsonic: uses getAlbumList2 with random type\n- Temp dirs: picks a random subdirectory containing audio files",
"is_bot": false,
"headline": "feat: play random album from any source (local, subsonic, temp)",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T16:47:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f772d74e3bb55f04b1bab0e41a7ad7e72faa3cc9",
"body": null,
"is_bot": false,
"headline": "fix: consistent nowplaying line count to prevent layout shift",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T16:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4065f26b72ba1b35db3b501efcd97cd8f5b32d9c",
"body": "loadSubsonicAlbumsForArtist and loadSubsonicAlbumsForGenre sorted\nthe album display list but left subsonicAlbumIDs in API response\norder, causing loadSubsonicTracksForAlbum to fetch tracks for\nthe wrong album when the API order differed from sorted order.",
"is_bot": false,
"headline": "fix: sync subsonicAlbumIDs sort order with album entries",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-19T16:05:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a50a44ec8926b0920f5307fdb319aaab5be7ec0f",
"body": "Query mpv's replaygain-data-per-file property at runtime to detect\nwhether the current file has replaygain tags. Render the replaygain\nmode indicator in muted style when no tags are found, foreground\nstyle when tags are present.",
"is_bot": false,
"headline": "feat: indicate in TUI when replaygain is on but file has no tags",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-07-18T04:10:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64c416a68189c81d1f422a1d23490de2075d80aa",
"body": "The progress bar uses a spring-animated model from the Bubbles library,\nwhere View() renders percentShown (the animated value), not targetPercent.\nOn track change, UpdateProgress(0) only set targetPercent to 0, but\nhandleProgressTick immediately overwrote it with the new song's actual\nposition, so the animation never reached zero.\n\nReplace the progress model entirely via SnapProgress() on track change,\nbypassing the spring animation so the bar snaps instantly to 0.",
"is_bot": false,
"headline": "Fix progress bar not resetting on track change",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T04:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "589d710129942a1fd0c3cf827b58bec2dba7fc94",
"body": "Instead of calling renderImagesCmd directly on header toggle (which\ncauses double-shift in terminals that auto-reposition images on text\nreflow), delay 16ms with a renderAlbumArtMsg to let the terminal settle\nbefore redrawing images at the correct row. fixes: #image-positioning",
"is_bot": false,
"headline": "fix: delay image repositioning on header toggle",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T04:17:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ae61d44b9dc6fcb71d93eab4b0b049110d4c5aa",
"body": "Album art, logo art, and artist thumbnail now compute their row\nposition based on showHeader. renderImagesCmd clears the art area\nat both possible header positions (row 1 and 3) before drawing,\npreventing remnants from prior art. ToggleHeader now calls\nrenderImagesCmd to reposition images on toggle.",
"is_bot": false,
"headline": "fix: all image rendering respects header state",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T04:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a527a90e062658b5770483d3e640fae66bd6292a",
"body": null,
"is_bot": false,
"headline": "docs: add clean screenshot",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T03:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c77df20d47b24fc385ea4756fa80ee0cb4f1508b",
"body": "When shuffle mode is on, currentIndex is now set to the first entry\nin the shuffle order (a random track) instead of keeping startIdx=0.",
"is_bot": false,
"headline": "fix: must ps now starts at a random track instead of track 1",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T03:19:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73a2ae6628b476a016ad401df29218047ae69283",
"body": "handleScanComplete's playQuery block now calls startPlaybackCmd and\ntrackChangedCmds directly instead of going through playTrack, matching\nctlPlay's pattern. The bug was that playTrack (a value receiver) returns\nonly a Cmd, discarding model modifications (like m.playing = true) that\ntrackChangedCmds makes on its local copy.",
"is_bot": false,
"headline": "fix: auto-start play now shows now-playing correctly",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T03:14:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bb1e5f147a81a8840ec5b247ea82633278b7e56",
"body": "…-start play\n\n- README: new point 12 for startup find-and-play; footer toggle noted;\n IPC bullet and features bullet updated for auto-start\n- DOCUMENTATION: --shuffle flag, ps command, H/M keybindings,\n show_header/show_footer config, server_badge prefix, auto-start examples",
"is_bot": false,
"headline": "docs: update README and DOCUMENTATION for header/footer toggle + auto…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T03:08:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d27d8c82179c9ee8c83987f149b89c1586cc3a8",
"body": "- must p/play and must ps/playshuffle now auto-start the TUI if no instance\n is running, with smart artist/album/track resolution\n- Added playshuffle/ps control verb (play + enable shuffle)\n- Added --shuffle flag (alias for --random)\n- normalizeSubsonicPrefix now also checks server badge (e.g. n:query)\n- Updated help text, examples, and COMPARISON.md",
"is_bot": false,
"headline": "feat: make must play auto-start TUI if not running",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-28T02:57:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b41df0deaf735985360483530842489f31566a4",
"body": "Add show_header/show_footer config options (both default true) and\nruntime toggle keys H (header) and M (footer). Hiding reclaims the\nspace for the bottom section/content rather than filling with blanks.\nConfig controls initial state; runtime toggles don't persist.",
"is_bot": false,
"headline": "feat: toggleable header and footer via H/M keys",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-27T21:51:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d5c48518a4b275bc7c319f5c3abd0ddf8398beb",
"body": "1. image: add HTTP client timeout (10s) for album art downloads\n2. config: prevent terminal hang on OSC 4 color query with TTY read timeout\n3. db: avoid SQLite placeholder limit in DeleteMissingTracks via temp table\n4. ctl: prevent IPC shutdown deadlock with buffered channel + timeout\n5. db: fix mul\n[…]\n: serialize process.Wait() to avoid double-wait on exec.Cmd\n9. scanner: skip unreadable directories instead of descending into them\n10. tui: remove duplicate trackChangedCmds() calls on playback start",
"is_bot": false,
"headline": "fix: release readiness — 10 bug fixes + MIT license",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-27T07:33:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f63cd63d5da9c38c8b1e7dd7cc55d6f33ccd964c",
"body": null,
"is_bot": false,
"headline": "docs: expanded COMPARISON with visual appeal table",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-27T06:23:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2996733d602fc34fb56d47deccc60511eb31f0a",
"body": null,
"is_bot": false,
"headline": "docs: added TUI music player COMPARISON.md",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-27T06:05:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "865c0308090d72ec4d79994534ac5ae5703a4225",
"body": "- audio_tap_windows.go: remove premature deferred audioClient.Release()\n that caused a use-after-free of the COM object. Add proper wasapiTap.Close()\n (Stop + Release) wired into AudioTap.Close() via cleanup callback.\n- audio_tap_darwin.go: fix sox command — use -e floating-point instead\n of inva\n[…]\noat' args.\n- audio_tap.go: add cleanup func() field to AudioTap; fix Close() to\n either wait on done (when subprocess exists) or close done (when no\n subprocess), preventing deadlock on WASAPI path.",
"is_bot": false,
"headline": "fix: WASAPI cleanup, darwin sox encoding flag, Close deadlock",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-25T03:32:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "790c2edaf6d6ec5f5f37e3b09810cb23b75e7809",
"body": null,
"is_bot": false,
"headline": "docs: README edits",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T20:59:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "231faa8c5c479a394e230a96ca3f914ab3c574e9",
"body": "- MPV IPC: named pipes via go-winio (conn_unix/conn_windows.go)\n- MPV binary: use mpv.exe on Windows\n- Socket cleanup/stat guarded with !windows\n- AudioTap: nil deref fix for readLoop and Close\n- Compilation: add audio_tap stubs for windows/darwin\n- ctl IPC: named pipe support via winio for listen/dial\n- Docs: HELP.md, scrobbling section, experimental platform note\n- CI: goreleaser + GitHub Actions workflows (ci, release)",
"is_bot": false,
"headline": "fix: Windows compatibility and cross-platform improvements",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T20:30:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63cf1056bcc71e75c907e7602bf0cc4aaafbb32c",
"body": null,
"is_bot": false,
"headline": "ci: change golangci-lint version to 2.12.2",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T19:34:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d0147788136d38ad4513cb4adb53b67ade8bb9",
"body": null,
"is_bot": false,
"headline": "ci: change golangci-lint-action to v7",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T19:28:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd40f32fed8d44f5a39b9348add484358608196f",
"body": null,
"is_bot": false,
"headline": "fix: README logo table layout, remove float/overlap hack",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T19:22:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d8b9360aa4088909e78be9ff1179938d5976778",
"body": null,
"is_bot": false,
"headline": "docs: README edits",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T19:15:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "799eed1c5f106573822c1fb42c3b087ce451ec32",
"body": null,
"is_bot": false,
"headline": "docs: added more screenshots",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T19:03:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b14010348fc5631d5ae18dd4b2611a9056786de8",
"body": "The mvhd version 0 and version 1 parsers in parseMoovAtom used wrong\nbyte offsets, reading creation_time/modification_time instead of\ntimescale/duration — off by 12 bytes (the 3-byte flags field wasn't\naccounted for). This caused every M4A/AAC file to get either zero or\ngarbage duration.",
"is_bot": false,
"headline": "fix: correct mvhd atom byte offsets for M4A duration parsing",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T17:51:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4ea51f811c0fc95befd69017387f8e169e73143",
"body": null,
"is_bot": false,
"headline": "docs: incorporated screenshots",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T07:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbce5504fbc94355f46db5db5a976fb57da51338",
"body": null,
"is_bot": false,
"headline": "add screenshots",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T06:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88d61a3882dbd2e9ac63db3062e540b8f6ff054f",
"body": null,
"is_bot": false,
"headline": "add screenshots",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T06:40:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "defc69c27d58adc52d150ec423f1d6596bc9f206",
"body": "…c; add screenshot",
"is_bot": false,
"headline": "docs: update README and docs for temp dirs, reverse playlist, subsoni…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T05:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49ab0d259f539c87aa5215cf37090ea3babed5b5",
"body": null,
"is_bot": false,
"headline": "fix: resolve lint issues, add scanning indicator, add CI workflow",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-24T05:05:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d15ad607f71ab1a227a52352f1ad7f79e95e9df",
"body": null,
"is_bot": false,
"headline": "feat: add reverse playlist order (X key)",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-22T23:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cafcc122f8063a66618e2f8fc03ac0be07db012e",
"body": null,
"is_bot": false,
"headline": "feat: temp directories modal (T key) for browsing download folders",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-22T23:31:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19a5da6e51e5f65111967e80ac18d8c58950fc78",
"body": null,
"is_bot": false,
"headline": "docs: update help text, README, and docs for Subsonic streaming support",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-22T20:46:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4254f0a0ea5be054983926afda515dfba99dda1d",
"body": "…ack, fix FLAC duration parsing",
"is_bot": false,
"headline": "fix: read metadata directly from file for CLI paths, auto-start playb…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-06-22T20:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "216c095657d14d35566a33025c709c1f85720c9e",
"body": null,
"is_bot": false,
"headline": "fix: default search source to both when subsonic enabled",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-27T20:22:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "296377e4a7ec0b7fb7332d794d0c6ea7ed653fb9",
"body": null,
"is_bot": false,
"headline": "fix: add ^t source hint to library browse help line",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-27T20:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cd1e4b2c122b79bfcfbce4a532cca55488e08bc",
"body": null,
"is_bot": false,
"headline": "feat: source filter tabs (local/both/subsonic) in library browse modal",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-27T20:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d67f941198c4a9687ac47008c5c4e50d74394f7",
"body": "…splay",
"is_bot": false,
"headline": "feat: configurable album sort (alpha/year desc/year asc) with year di…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-27T01:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b951557f7f6a558cfe4d0b1802b63204fd029205",
"body": null,
"is_bot": false,
"headline": "fix: make multi-disc track format per-album instead of per-playlist",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-20T21:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77d3764387cf6cca7bffca4f8258313b76bafa94",
"body": "… genre ID normalization\n\n- Fix bug where genre browser only rendered col1 (genres), hiding albums\n and tracks columns\n- Subsonic genres: GetGenres API, merge with local genres in library\n browser with subsonic badge, async album/track loading via\n getAlbumList2 and getAlbum\n- Column widths dynam\n[…]\nackage: normalizes ID3v1 numeric genre IDs\n (e.g. 13->Pop, 17->Rock) and splits multi-genre values, applied\n at scan time and as safety net in db.GetGenres()\n- gofmt alignment fix in ctl/messages.go",
"is_bot": false,
"headline": "feat: genre browser artist-album display, subsonic genre integration,…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-20T21:32:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "751cfd2390235f555e57672f629f126bcf8dd442",
"body": "- fix 'must find subsonic:query' by adding 'subsonic' to parseQueryPrefix\n- support configured server name as alias (e.g. navidrome: for ServerName Navidrome)\n- support nested subsonic field prefixes (artist:/album:/title:/genre:/year:)\n- align Search3 args with TUI modal defaults\n- store SubsonicAr\n[…]\nounts)\n- add 'must playlists' subsonic section with badge prefix\n- support 'must play/enqueue/enqueue-next N' for subsonic playlists\n- add BaseURL() getter, ResultPlaylist/ResultSubsonicPlaylist types",
"is_bot": false,
"headline": "feat: subsonic CLI find, library, and playlists commands",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-20T20:15:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "63ff51d0d57d3003b3129f04b72e331e5cc435df",
"body": null,
"is_bot": false,
"headline": "fix: indent 'Real audio' under 'Visualizer' in options modal",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-20T19:26:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ff36704ac613d2ec515daa801638666b4166fcf",
"body": null,
"is_bot": false,
"headline": "feat: Subsonic-compatible server client (Navidrome/Jellyfin/etc.)",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-20T19:24:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bc1355860e7d1894219e5f073f77b36e48444ac",
"body": null,
"is_bot": false,
"headline": "docs: update help text, minor docs edits",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-20T03:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91bc6b0a3d0286845cc6339c0cec66e4efbc372d",
"body": "…on in nowplaying",
"is_bot": false,
"headline": "feat: replaygain support, multiple music directories, playlist positi…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T22:54:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e1d3fb7661d98d96b7cf594194cde60e9e1c3aa",
"body": "New internal/ctl/ package for CLI control of a running must instance:\n- Unix domain socket at $XDG_RUNTIME_DIR/must/ctl.sock\n- Server listens in background goroutine, sends CtlMessage tea.Msg\n- Client mode detects verb args (play, pause, next, etc.) and sends via socket\n\n22 control commands implemen\n[…]\ntead of broken top-level properties.\nPrevious: skipPrev restart-at-3s behavior removed (always goes back).\nAuto-restart must play after must stop fixed.\nPause state not overwriting playing flag fixed.",
"is_bot": false,
"headline": "feat: control running must from command line via Unix socket",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T22:12:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2435f522ad95fe87ae0ab9c84ab6302e7f27397",
"body": "- medium: no bottom section, same as large otherwise\n- compact: no album art, no bottom section, mini footer, text truncation\n- narrow: album art top-left, constrained nowplaying, no bottom section, mini footer\n- cycleView (v/tab) disabled for non-large layouts\n- image renderer init respects CLI --layout override\n- Lidarr [L] indicator shown in mini footer\n- Adjusted terminal size requirements per layout",
"is_bot": false,
"headline": "feat: layout-aware rendering for medium/compact/narrow modes",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T18:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0b28c97351c80d4da0df215c56525a8c8d8262c",
"body": "…etection, terminal size check\n\n- c key copies \"Artist - Album (Year) - Title\" to clipboard (wl-copy/xclip/xsel/pbcopy)\n- Song info overlay in fullscreen visualizer (title/artist/album, respects show_info/info_duration config)\n- Sleep timer: left/right 5-min adjust, layout guard in compact/narrow, a\n[…]\nly quits and saves state; normal quit no longer\n calls ClearPlaybackState() (preserves prior state if playlist is empty)\n- renderImagesCmd suppressed during layout prompt via layoutPromptActive guard",
"is_bot": false,
"headline": "feat: copy to clipboard, vis overlay, sleep timer adjust, dark mode d…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T17:57:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62cc6f620e692056964497674f2f13514dec1b09",
"body": null,
"is_bot": false,
"headline": "feat: --alarm CLI flag with cancelable pre-TUI countdown",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T14:43:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dbaecc58e6fb26bde9a0bab00929d3eacb8bff0",
"body": "…llscreen toggle\n\nPort from rptui:\n\n- Visualizer package (internal/tui/visualizer/): core engine with 2048-pt FFT (gonum),\n 10 log-spaced frequency bands, simulated LCG spectrum, real audio capture via\n PipeWire (pw-record) or PulseAudio (parecord), auto-detection + fallback.\n\n- 9 rendering modes:\n[…]\nrtist art cleanup on view transition, theme color propagation.\n\n- Also fixed .gitignore pattern \"must\" -> \"/must\" to allow tracking\n cmd/must/main.go (was accidentally ignoring the source directory).",
"is_bot": false,
"headline": "feat: audio visualizer with 9 rendering modes, real audio capture, fu…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T14:10:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb3073f87155b2bc21bcd67f7c472c3b34d0ad04",
"body": "…ptui, README restructure",
"is_bot": false,
"headline": "fix: seek 10s, gallery image clearing, API logging, Lidarr matching r…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T03:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2574a3d3caef789528224b30e28302813285d59d",
"body": "- Remove incorrect -1 from remainingHeight formula (view.go:71)\n nowPlayingLines miscount caused +1 padding line (strings.Count -> lipgloss.Height)\n- Refactor footer to 2-line layout with Lidarr indicator, center-line rendering, dim keys\n- Add move-track-to-top/bottom feature (g/G) with MPV IPC sync\n- Move lyrics/bio/gallery keys from top footer row to bottom-left",
"is_bot": false,
"headline": "fix: footer positioning off-by-one in layout height calculation",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-19T00:41:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00d8d2d9f7a9b2ad5e29a2b3d82777feeb123cf6",
"body": "…robble feedback, modal centering\n\n- Add sleep timer modal (z key) with set/cancel and pause-then-quit\n- Add build-time Last.fm API key/secret injection via -ldflags (Makefile)\n- Add Last.fm auth flow with browser redirect (lastfm_auth.go)\n- Add OpenBrowser utility for cross-platform URL opening\n- A\n[…]\nlways call PlaylistPlayIndex (remove skip-when-0 guard)\n- Re-read playback position after track change for accurate progress\n- Add .build-secrets to .gitignore, add Makefile and .build-secrets.example",
"is_bot": false,
"headline": "feat: sleep timer modal, build-time Last.fm keys, playlist EXTINF, sc…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-18T18:40:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d37441c2691158a65ccff8d013bb6d735c4f8b60",
"body": "…nd y/Y for lyrics",
"is_bot": false,
"headline": "feat: freeze lyrics/artist-bio on track change with u to update, rebi…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-18T16:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64bd1cad4255e0db5beea2c5e496b20533385604",
"body": "- add TheAudioDBApiKey default, validate TerminalPalette range in config\n- create options modal (press 'o') with 10 settings: album art, notifications, visualizer, theme, etc.\n- changes persist to config via cfg.Save()\n- fix missing DefaultKeyMap variable with all binding definitions\n- remove duplicate EnqueueNext field in KeyMap struct",
"is_bot": false,
"headline": "feat: add options modal + config validation fixes",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-18T16:31:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89fc5306ea3458c1ed85cccad7fbf44dee1cae4c",
"body": "…s, and styled hints\n\n- Add Go-based fuzzy matching (sahilm/fuzzy) for all query types\n - Plain queries: subsequence match against combined artist+album+title\n - Field queries: fuzzy-match field vocabulary, expand top 5 to tracks\n - Year filtering preserved as post-filter\n- Add album-level action\n[…]\nle: field search\n- Style search help line with AccentStyle keys, MutedStyle descriptions\n- Update hint to show all supported fields and keybindings\n- New DB methods: GetAllAlbums(), GetTracksByField()",
"is_bot": false,
"headline": "feat: improve search with fuzzy matching, album actions, field aliase…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-18T16:08:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3a4e0a0eb34efb57b6205b9e96d973f0336110da",
"body": "… icon updates, README refresh\n\nMove viewport SetContent/SetWidth from View() into updateBottomView() called\nfrom Update handlers (rptui pattern). Add trailing newlines and ansi.Wordwrap\nso content always exceeds viewport height, enabling scroll. Update footer key\nbindings and now-playing icons. Refresh README with badges and description.",
"is_bot": false,
"headline": "fix: viewport scrolling for lyrics and artist bio, footer/now-playing…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-18T14:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc78339701a12245f791f39441a52773cfe3dd4e",
"body": "…ng, library hints, art cache per-album, resume playback guard, TUI logging\n\n- Save playlist (S): shows text input for custom name, enter confirms, esc cancels\n- Progress bar: use upper half block (▀) for thinner bar like rptui\n- Help modal: centered on screen, keys in accent style, descriptions in \n[…]\n-track path (fewer cache entries)\n- Resume playback: guard MPV position check during restore, set playlist cursor\n- TUI logging: added SetLogger/logf for track changes, scan complete, playback restore",
"is_bot": false,
"headline": "fix: save playlist naming, progress bar thickness, help modal centeri…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-16T21:18:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1789b6f21df6139fa1f50c0d2ddd783d615f6736",
"body": "…hlighted, toggle-back, column layout, TheAudioDB rewrite, Discogs cleanup, search msgs export\n\n- Shuffle toggle no longer stops/restarts MPV (just updates internal order)\n- ctrl+r restarts song via SeekAbsolute(0), resolves 'r' key conflict\n- J/K move track uses PlaylistMove IPC instead of stop/res\n[…]\nsMsg for main Update loop\n- Footer: add ^R Rst, v/tab View, updated E description\n- Help: add ctrl+r restart song entry, v/tab view entry\n- Viewport: initialize with width/height instead of zero-value",
"is_bot": false,
"headline": "fix: shuffle toggle, restart song, playlist move via IPC, enqueue hig…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-16T06:13:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e75a170caad2c00612eb40aff356acf555af05ae",
"body": null,
"is_bot": false,
"headline": "docs: add README.md with features, keybindings, and configuration (I-28)",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T23:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef2284584d0a58d06eaf0e7115d3fb6d835ab9cc",
"body": "…I-27)",
"is_bot": false,
"headline": "feat: local artist image support and artist image in bio view (I-26, …",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T23:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28e3bb31ee18e2bff375cd62ddc83033c6646173",
"body": null,
"is_bot": false,
"headline": "fix: MP3 duration calculation - layer bits inverse encoding bug (I-25)",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T22:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b62a73674bc420f9d64ddbd94a92a7abbc020538",
"body": "…playlist reorder/save, enqueue-next (I-19–I-24)",
"is_bot": false,
"headline": "feat: multi-disc track# column, blank line footer, restore/autoplay, …",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T20:57:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e2e7939823405adfe9766724928bd85c8c8a893",
"body": "…0–I-18)",
"is_bot": false,
"headline": "feat: 3-column library browser, genre splitting, feat. stripping (I-1…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T19:27:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8eafefd04bc7e17ea79261b67aa02c0c1d324f6c",
"body": "I-06: clearKittyImagesCmdIf() on modal open, renderImagesCmd skips\nI-07: renderAlbumArtAfterDelay() on all modal close paths\nI-08: Library and search modals now fill terminal (no centered box)\nI-09: Viewport model for scrollable lyrics and artist bio views\n- up/down/j/k scroll viewport in lyrics/bio mode\n- pageup/pagedown/home/end work in scrollable views\n- viewport scroll resets on view switch",
"is_bot": false,
"headline": "fix: modal art clear/redraw, full-window modals, scrollable lyrics/bio",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T18:34:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f17776ae3cbc0da1d9b2e8d76465d436718ebe4",
"body": "…tion\n\n- I-01: nowPlaying.Update(msg) at top of Update() for FrameMsg processing\n- I-04: CycleView matches v key\n- Default return uses tea.Batch(cmds...) for cmd propagation\n- Gallery modal open/close/keypress handling\n- Enqueue starts playback if nothing playing, appends to MPV if playing\n- Enter key uses PlaylistPlayIndex for gapless jumping\n- Playback state saved on quit\n- onlineArtFetchedMsg handling to re-trigger art load",
"is_bot": false,
"headline": "fix: progress bar animation, modal handling, gapless playback integra…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:55:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05838144fe3a4896983833f8761b8c7c758a3ea1",
"body": "- renderArtistBio now shows bio with source label\n- Discography section with source attribution\n- Gallery image count hint with I keybinding\n- Page URL link display\n- Gallery modal rendering in renderModal",
"is_bot": false,
"headline": "feat: enhanced artist info view with discography and gallery hint",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:54:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5332dea1a5c7d016e900bee151015450810fe3d",
"body": "- handleScanComplete calls restorePlaybackState() when configured\n- searchModal.SetDB(m.libraryDB) instead of recreating modal\n- Improved scan result handling and library population",
"is_bot": false,
"headline": "feat: playback state restore on scan complete, SetDB on search",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:54:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb9c08172281b9c5751df51d784c932ce6d8b918",
"body": "- handlePlaybackEnded uses MPV playlist for repeat-one/all\n- skipNext/skipPrev use MPV PlaylistPlayIndex instead of full restart\n- seekForward clamps to remaining duration\n- seekBackward clamps to not go below 0\n- shuffle toggle rebuilds MPV playlist order\n- Simplified playlist position tracking with mpvIndexToPlaylistIndex",
"is_bot": false,
"headline": "fix: gapless playback, seek clamping, shuffle-aware navigation",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:52:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20895c2b56db5f0464807fdb67a30a223a932cad",
"body": "…ions\n\n- fetchArtistInfoCmd: 4-phase aggregation (TADB+MB, Discogs, Wikipedia, Lidarr)\n- SavePlaybackState/LoadPlaybackState/ClearPlaybackState\n- restorePlaybackState() method resolving paths to Track objects\n- fetchOnlineArtCmd for TheAudioDB art fallback\n- sendNotificationCmd for desktop notifications\n- buildMPVPlaylistPaths/playlistIndexToMPVIndex/mpvIndexToPlaylistIndex\n for shuffle-aware MPV playlist management",
"is_bot": false,
"headline": "feat: multi-source artist info, playback state, online art, notificat…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:52:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c48f864ffa91e1135c199bcabc5cb03c117f81c",
"body": "- Added galleryModal field and ModalGallery enum\n- artistInfo/artistCache/artistInfoEventID replacing old bio fields\n- notifSentForSong for desktop notification tracking\n- RestoreOnStart config support\n- Updated help entries for I (gallery), e (enqueue), v (view)",
"is_bot": false,
"headline": "feat: gallery modal, artist info model, playback state restore",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:51:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4e2ae52cae460d88fb14a6a0ea06d640dc843a5",
"body": "- CycleView now bound to both v and tab (I-04)\n- Added Gallery and Enqueue keybindings\n- Added GalleryMsg, GalleryImageLoadedMsg, GalleryRenderImageMsg\n- Added onlineArtFetchedMsg, notificationSentMsg, restorePlaybackMsg\n- Replaced artistBioFetchedMsg with artistInfoFetchedMsg",
"is_bot": false,
"headline": "fix: add v key for CycleView, Gallery/Enqueue bindings, new msg types",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff294950c0044348cf7890847eb3a4a286fb4b6e",
"body": "Full gallery modal ported from rptui: image navigation with\nleft/right arrows, kitty/sixel/iterm2/halfblocks rendering,\ntmux+Kitty pixel area cap, prefetch adjacent images.",
"is_bot": false,
"headline": "feat: add gallery modal for artist image browsing",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:50:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d3c29e5f9f3f1f1cf36929a02952b88b5e4520",
"body": "…-03)\n\n- Added SetDB() method called after scan completes (fixes nil db)\n- Changed enqueue from e to ctrl+e to avoid typing conflict\n- Removed j/k navigation aliases (use arrows or ctrl+n/p)\n- Updated help text accordingly",
"is_bot": false,
"headline": "fix: search modal SetDB, ctrl+e enqueue, ctrl+n/p navigation (I-02, I…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:49:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ab998a5db99490dc2aa2700d7cec6faaf945829",
"body": "Major library modal overhaul (I-10, I-11, I-12, I-13, I-14, I-16, I-17):\n- True 3-column layout: artists | albums | tracks side by side\n- Genre browse mode (g key toggles artists/genres)\n- Fuzzy type-to-filter on all panes\n- Line-by-line side-by-side rendering with proper alignment\n- Right arrow key for pane focus (in addition to l)\n- Esc to close added to hints\n- Accent-colored keys in hint line\n- Filter indicator in top bar",
"is_bot": false,
"headline": "feat: 3-column library browser, genre browse, fuzzy filter",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:48:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7812f8711253b0ccd748fb5b74bb772bda6019e1",
"body": "- Added Trk# column showing disc/track number from tags\n- Dynamic column width calculation based on content\n- Improved row rendering with proper alignment\n- BuildPlaylistRows helper for track-to-row conversion",
"is_bot": false,
"headline": "feat: playlist track number column, disc number, improved rendering",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:48:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b31bd28018d6c058de856de99a1b1d2744cb661b",
"body": "Keys rendered in accentStyle, labels in mutedStyle, matching rptui\npattern. Added gallery (I) and enqueue (e) hints.",
"is_bot": false,
"headline": "fix: improved footer key hint rendering with accent colors",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:48:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80b981a9ea3ddb1a4c23c4fc7cc7afbf46fcd6a5",
"body": "Color utilities consolidated into colorutils.go.",
"is_bot": false,
"headline": "fix: remove duplicate color utils from now_playing widget",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:47:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91c7604fa69a3fa48ccc6bade3f33fb15ab30199",
"body": "Consolidate darkenColor/lightenColor into colorutils.go, removing\nduplicates from now_playing.go and playlist.go.",
"is_bot": false,
"headline": "refactor: extract shared color utilities from widgets",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c427ea7701ccbd330752ab848ee9b514c8ef174",
"body": "- TheAudioDBApiKey field for online art lookups\n- RestoreOnStart bool (default true) for playback state restore",
"is_bot": false,
"headline": "feat: add TheAudioDB API key and restore-on-start config",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:40:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6f9379ffaaf55fbc2036a251d45e53c4f891ebd",
"body": "- PlaylistPlayIndex(), RemoveFromPlaylist(), GetPlaylistCount()\n- AppendToPlaylist() for enqueue-while-playing\n- SkipNext/SkipPrev using MPV playlist navigation\n- IPC reconnection retry logic in Seek and GetPosition\n- BuildMPVPlaylistPaths helper for shuffle-aware playlist building",
"is_bot": false,
"headline": "feat: MPV playlist management, gapless playback, IPC improvements",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:39:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b6721459a1d5093d942ec061a5f9d399e0a2e0a",
"body": "- SHA256-based cache keys for collision-free art caching\n- CacheArtData() for scanner-time extraction\n- DownloadAndCacheArt() for online art fallback\n- FetchAlbumArtURLTheAudioDB() for online art lookup\n- NewRendererWithProtocol() respects force_protocol config\n- Parent directory art search in GetArtForTrack",
"is_bot": false,
"headline": "feat: art caching, online fallback, ForceProtocol support",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:39:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a67b45d5d82cc6c277ebe09e1a15b80ba5d61e85",
"body": "Scanner now extracts embedded album art at scan time via CacheArtData,\nuses batch inserts for performance, and handles incremental rescanning\nwith file modification time tracking.",
"is_bot": false,
"headline": "feat: batch DB inserts, embedded art caching, incremental rescan",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12d71969eeb53ff42118a8af8e1de23ae3ad0a50",
"body": "- GetGenres(), GetAlbumsByGenre(), GetTracksByAlbum() for browse\n- InsertTracksBatch() with transaction batching for fast scanning\n- idx_tracks_album_artist index for album-artist grouping\n- SetLogger() for scanner progress reporting",
"is_bot": false,
"headline": "feat: add genre/album queries, batch inserts, artist index",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06693c20eceb70a525dfe698e1884b706854c02a",
"body": "- Discogs: GetArtistByMBID for enrichment\n- MusicBrainz: expanded queries (artist lookup, release groups, URLs)\n- TheAudioDB: artist search by MBID\n- New Lidarr client: GetArtistByMBID, GetArtistAlbums\n- New notify package: desktop notifications via notify-send/osascript\n- New util helpers: shared HTTP client, User-Agent, retry logic\n- New ArtistInfo model: per-field source tracking, gallery URLs",
"is_bot": false,
"headline": "feat: add multi-source artist info, Lidarr, notifications, and utilities",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4db6ff1d34b3a108a8da39c1a7c53e5c05a03fe",
"body": "Reworked the MP3 duration calculation to properly locate Xing/VBRI\nheaders relative to the first MPEG frame (using side-info offset)\nrather than reading them immediately after ID3v2. The estimator now\nuses parsed frame header parameters instead of scanning for frames.\nThis fixes durations being ~70% of actual for VBR files without\nXing headers (I-25).",
"is_bot": false,
"headline": "fix: rewrite MP3 duration parser for VBR accuracy",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T16:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f55a6ce617cc5f21282203ec1e3cd6dc048bb89",
"body": "…yout\n\n- Split view into header, nowPlaying, playlist, footer widgets\n- Add library, search, help modal overlays\n- Logo art fallback when no track playing (embedded via go:embed)\n- CellRatio-aware image sizing and rendering\n- Fix footer visibility using rptui's line-by-line padding approach\n- Switch to bubbles logo asset\n- Overwrite log on each run instead of appending\n- Add .golangci.yml with QF1003 exclusion",
"is_bot": false,
"headline": "feat: restructure TUI with widgets, modals, album art, and correct la…",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-15T03:34:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a0badfa72834ab309743e0f9de84706b2ca7ed9",
"body": "Complete foundation with all core packages: config, models, db (SQLite+FTS5),\nduration readers (FLAC/MP3/M4A/OGG), scanner, playlist (M3U), mpv backend,\nimage rendering (go-termimg), and API clients (LRCLib, Wikipedia, Discogs,\nTheAudioDB, MusicBrainz, Last.fm, ListenBrainz).\n\nTUI features: 3-pane l\n[…]\ned), artist bio view (Wikipedia), theme watcher,\nscrobbling with song transition support, shuffle/repeat modes, sleep timer,\nCLI arguments (--random, --repeat, --layout), crypto/rand PRNG for shuffle.",
"is_bot": false,
"headline": "feat: initial implementation of must MUSic TUI",
"author_name": "pdfrg",
"author_login": "pdfrg",
"committed_at": "2026-05-14T10:28:43Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 3,
"commits_last_year": 92,
"latest_release_at": "2026-07-21T03:36:31Z",
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 6,
"days_since_latest_release": 7,
"mean_days_between_releases": 11.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/pdfrg/must",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/pdfrg/must",
"is_deprecated": false,
"latest_version": "v0.2.0",
"repository_url": "https://github.com/pdfrg/must",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T23:18:38Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 65239,
"source_files_sampled": 76,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "charm.land/bubbles/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.0"
},
{
"name": "charm.land/bubbletea/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.6"
},
{
"name": "charm.land/lipgloss/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.3"
},
{
"name": "github.com/Microsoft/go-winio",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/adrg/xdg",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.3"
},
{
"name": "github.com/blacktop/go-termimg",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.26"
},
{
"name": "github.com/charmbracelet/x/ansi",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.11.7"
},
{
"name": "github.com/dhowden/tag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20240417053706-3d75831295e8"
},
{
"name": "github.com/go-ole/go-ole",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/moutend/go-wca",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/muesli/termenv",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.16.0"
},
{
"name": "github.com/pelletier/go-toml/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.3.1"
},
{
"name": "github.com/sahilm/fuzzy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.2"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.43.0"
},
{
"name": "gonum.org/v1/gonum",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.0"
},
{
"name": "modernc.org/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.50.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "pdfrg",
"commits": 92,
"avatar_url": "https://avatars.githubusercontent.com/u/110258935?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 2,
"reason": "8 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "df7410a8c84e938e5949bcce77e7fc6b22d70f38",
"ran_at": "2026-07-28T09:45:04Z",
"aggregate_score": 2.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T03:16:06Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pdfrg/must",
"host": "github.com",
"name": "must",
"owner": "pdfrg"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"security": 26,
"vitality": 67,
"community": 24,
"governance": 28,
"engineering": 64
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 67,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"commits_last_year": 92,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "92 commits in the last year",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 92
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_latest_release": 7,
"mean_days_between_releases": 11.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~11.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 11.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "critical",
"name": "Sustainability & Governance",
"value": 28,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "critical",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 27,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "pdfrg",
"public_repos": 2,
"account_age_days": 1459
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of pdfrg",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "pdfrg"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~3 yr old",
"points": 11.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"packages": [
"github.com/pdfrg/must"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "3 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 3
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 64,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"bubbletea",
"golang",
"music-player",
"omarchy-linux",
"subsonic-client",
"tui"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 26,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 26,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 2.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "8 existing vulnerabilities detected",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 55,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.978,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "90 of 92 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 90,
"sampled": 92
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 92",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 92
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 65239,
"source_files_sampled": 76,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/76 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 76,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-28T09:45:09.592074Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pdfrg/must.svg",
"full_name": "pdfrg/must",
"license_state": "standard",
"license_spdx": "MIT"
}