sfackler / bytes

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

安装 crates:bytes@1.12.1 会引入 31 个包（直接与传递）：其中 1 个存在已知公告，0 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 2651,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Rust": 157911,
        "Shell": 1866,
        "PowerShell": 576
      },
      "pushed_at": "2019-12-12T16:41:21Z",
      "created_at": "2017-04-25T04:09:37Z",
      "owner_type": "User",
      "updated_at": "2019-06-06T20:10:15Z",
      "description": "Utilities for working with bytes",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Steven Fackler",
      "type": "User",
      "login": "sfackler",
      "company": "@palantir ",
      "location": null,
      "followers": 986,
      "avatar_url": "https://avatars.githubusercontent.com/u/1455697?v=4",
      "created_at": "2012-02-21T00:48:31Z",
      "is_verified": null,
      "public_repos": 175,
      "account_age_days": 5269
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2017-03-15T16:36:52Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2017-02-24T18:35:53Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2015-12-04T04:40:52Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2015-02-10T07:36:43Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "0b4185c716efda131812c67e73a1ca05f89af3e8",
          "body": null,
          "is_bot": false,
          "headline": "Fix typos in src/bytes.rs (#106)",
          "author_name": "Phil Ruffwind",
          "author_login": "Rufflewind",
          "committed_at": "2017-04-24T19:47:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e158160418308d0102bc6c6d5984710c7f14e0d7",
          "body": null,
          "is_bot": false,
          "headline": "Remove calls to deprecated drain* methods from docs (#102)",
          "author_name": "jaystrictor",
          "author_login": "jaystrictor",
          "committed_at": "2017-04-14T16:06:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4645f6ec4bd607031d8899b1a36722b63ee4ed57",
          "body": null,
          "is_bot": false,
          "headline": "implement put_u8 for BytesMut (#101)",
          "author_name": "Sean McArthur",
          "author_login": "seanmonstar",
          "committed_at": "2017-04-06T15:59:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a6901cdcd58f7353e3841dc9c37fde889f7702b",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to v0.4.2",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-04-05T19:12:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9aa24ebea1b3b6de824a6bb3236edf07605cae06",
          "body": "The shared debug_assert is to ensure that the internal Bytes\r\nrepresentation is such that offset views are supported. The only\r\nrepresentation that does not support offset views is vec.\r\n\r\nFixes #97",
          "is_bot": false,
          "headline": "Bytes: only the vec repr is not shared (#100)",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-30T21:49:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "627864187c531af38c21aa44315a1b3204f9a175",
          "body": null,
          "is_bot": false,
          "headline": "Bytes::split_{off,to} should panic if `at > len` (#91)",
          "author_name": "Stepan Koltsov",
          "author_login": "stepancheg",
          "committed_at": "2017-03-28T19:38:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b78bb3baaa949def0389dfdbd243f74e0655f924",
          "body": "Before this commit `Bytes::split_{off,to}` always created a shallow copy if `self` is arc or vec.\r\n\r\nHowever, in certain cases `split_off` or `split_to` is called with `len` or `0` parameter. E. g. if you are reading a frame from buffered stream, it is likely that buffer contains exactly the frame s\n[…]\ng. `drop`) on both `bytes` objects require atomics\r\n* memory will be probably released to the system later\r\n* `try_mut` will fail\r\n* [into_vec](https://github.com/carllerche/bytes/issues/86) will copy",
          "is_bot": false,
          "headline": "Handle corner cases of Bytes::split_{off,to} (#87)",
          "author_name": "Stepan Koltsov",
          "author_login": "stepancheg",
          "committed_at": "2017-03-28T03:45:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6c6c55d8e124d7becc72492c0a8969d217beda94",
          "body": null,
          "is_bot": false,
          "headline": "Flag `Deref` methods as `#[inline]` (#93)",
          "author_name": "Alex Crichton",
          "author_login": "alexcrichton",
          "committed_at": "2017-03-24T14:39:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "613d4bd5d56d086ae0fc80746aa111c1ae6b7d2c",
          "body": "Standard `Debug` implementation for `[u8]` is comma separated list\r\nof numbers. Since large amount of byte strings are in fact ASCII\r\nstrings or contain a lot of ASCII strings (e. g. HTTP), it is\r\nconvenient to print strings as ASCII when possible.",
          "is_bot": false,
          "headline": "Reimplement fmt::Debug for Bytes and BytesMut (#84)",
          "author_name": "Stepan Koltsov",
          "author_login": "stepancheg",
          "committed_at": "2017-03-21T04:09:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc9c8e304e60b6038e0df4bfd7abfdc145251310",
          "body": "Limit the number of threads when using qemu to 1. Also, don't bother\r\nrunning the stress test as this will trigger qemu bugs. Finally, also\r\nmake the stress test actually stress test.",
          "is_bot": false,
          "headline": "Misc CI fixes (#89)",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-20T17:12:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bed128b2c0697a34e96b4b4d77c00cd8f1d13ca3",
          "body": "Closes #79",
          "is_bot": false,
          "headline": "Clarify when `BufMut::bytes_mut` can return &[]",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-19T20:58:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a265cc8ebef1614581661aa77b9290de3a493e1",
          "body": "I found this significantly improved a\r\n[benchmark](https://gist.github.com/danburkert/34a7d6680d97bc86dca7f396eb8d0abf)\r\nwhich calls `bytes_mut`, writes 1 byte, and advances the pointer with\r\n`advance_mut` in a pretty tight loop. In particular, it seems to be the\r\ninline annotation on `bytes_mut` wh\n[…]\n\n\r\n```\r\nslice::from_raw_parts_mut(ptr.offset(len as isize), cap - len)\r\n```\r\n\r\nbut, this caused a very measurable perf regression (almost completely\r\nnegating the gains from marking bytes_mut inline).",
          "is_bot": false,
          "headline": "Add inline attributes to Vec's MutBuf methods (#80)",
          "author_name": "Dan Burkert",
          "author_login": "danburkert",
          "committed_at": "2017-03-19T20:54:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4fe4e9429a9ad6ec51060c35a382b69651691f8d",
          "body": "Also fixes an issue with a line wrap in the middle of an inline code\r\nblock.",
          "is_bot": false,
          "headline": "Clarify BufMut::advance_mut docs (#78)",
          "author_name": "Dan Burkert",
          "author_login": "danburkert",
          "committed_at": "2017-03-19T20:53:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a4018e7571538c8cabb1cae0bde3f0d8949fde2",
          "body": "Closes #83",
          "is_bot": false,
          "headline": "Fix tests on nightly",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-19T16:08:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99fba239db1962e8c039d3255e4e5417aef283ba",
          "body": null,
          "is_bot": false,
          "headline": "Tweak docs (#76)",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-16T19:11:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcd6c184e43ca1617114cfb76b4b29d01626e4f4",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to v0.4.1",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-15T16:36:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e6d65a1d6e18706060239868622701be22878a2",
          "body": null,
          "is_bot": false,
          "headline": "Add a changelog",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-15T16:36:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02b614464457d2d0e0579604d09709dabdc13ec7",
          "body": null,
          "is_bot": false,
          "headline": "Depend on released iovec crate",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-15T16:23:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e319b51bef1460121d1ad6550bef74038470c69",
          "body": null,
          "is_bot": false,
          "headline": "Impl Extend for BytesMut",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-07T23:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06b94c55b0f6624845b8570f15f8decb1624e964",
          "body": "The `Source` trait was essentially covering the same case as `IntoBuf`,\nso remove it.\n\nWhile technically a breaking change, this should not have any impact due\nto:\n\n1) There are no reverse dependencies that currently depend on `bytes`\n2) Source was not supposed to be implemented externally\n3) IntoBuf provides the same implementations as `Source`\n\nGiven these points, the change should be safe to apply.",
          "is_bot": false,
          "headline": "Remove buf::Source in favor of buf::IntoBuf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-07T19:30:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d70f575afd45f6b70da2edf50f629ac86a8faf16",
          "body": null,
          "is_bot": false,
          "headline": "Provide Debug impls for all types",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-07T18:20:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "933b8b26f68c56102dd1f647d2dfb5add51e7e3a",
          "body": "This change tracks the original capacity requested when `BytesMut` is\nfirst created. This capacity is used when a `reserve` needs to allocate\ndue to the current view being too small. The newly allocated buffer will\nbe sized the same as the original allocation.",
          "is_bot": false,
          "headline": "`BytesMut::reserve` should avoid small allocations",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-03T00:14:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b44fc31463ba0d7c7bec519190b73ec61581fb04",
          "body": null,
          "is_bot": false,
          "headline": "Move Inner constructions to struct fns",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-02T21:46:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0142aa6daf5a77a054ac258a34518fc5de22660",
          "body": null,
          "is_bot": false,
          "headline": "Clarify API edge cases",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-02T02:30:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94396162b222826fc0bb2ad9e9fb9a58bafe4a4a",
          "body": null,
          "is_bot": false,
          "headline": "Implement `chain` combinator for `Buf`",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T22:22:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb9bf7ee3e89435a16f60afc715e52e6a1d24b01",
          "body": null,
          "is_bot": false,
          "headline": "Add vectored support to Buf and BufMut",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T21:18:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4462056e262ce9beef9d467eaabe76dd521f5a09",
          "body": null,
          "is_bot": false,
          "headline": "Move stray impls into appropriate file",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T21:15:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30c0e4e9c87e6427720d1f736211023c04f78beb",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'alexcrichton/more-object-safe'",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T18:44:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d19c929018fd241fcfc8377708efb20ec6949a77",
          "body": "Add `?Sized` bounds to work for DST objects and also add impls for `Box` as well\nas `&mut`",
          "is_bot": false,
          "headline": "Expand object-safe impls slightly",
          "author_name": "Alex Crichton",
          "author_login": "alexcrichton",
          "committed_at": "2017-03-01T18:37:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fec8a92ad8f554824ce51d554b495a8672b1072",
          "body": null,
          "is_bot": false,
          "headline": "Implement iterator adapter for `Buf`",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T18:03:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f8c56511193aee888cb45d24e199743aea844b9",
          "body": "Enables collecting the contents of a `Buf` value into a relevant\nconcrete buffer implementation.",
          "is_bot": false,
          "headline": "Implement `FromBuf` and `Buf::collect`",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T17:30:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd8f716e684f4ca2b7380f3caebc412652368f31",
          "body": null,
          "is_bot": false,
          "headline": "Rename a test file to match lib naming",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T03:10:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22a5fb8d9b760c5e08a008a77e0fb75623a2aec9",
          "body": null,
          "is_bot": false,
          "headline": "Rename some functions on Bytes",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T03:05:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e842296c4d1baad7454ca8a65ebb7f073421b255",
          "body": null,
          "is_bot": false,
          "headline": "Implement IntoBuf for T: Buf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T03:02:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7f8d6c9efa46827f43d412785c8d554e8fcaf6b",
          "body": null,
          "is_bot": false,
          "headline": "Don't re-export everything from `buf` module",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-03-01T01:09:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87160b6232e3af815421c9814ca7bac02e8ec4e3",
          "body": "Allows links in other crates to link to crates.io docs of bytes itself.",
          "is_bot": false,
          "headline": "Add doc(html_root_url)",
          "author_name": "Alex Crichton",
          "author_login": "alexcrichton",
          "committed_at": "2017-03-01T00:55:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4466b75ae4da3e62517c1ac826e2bdfa0ba152ad",
          "body": null,
          "is_bot": false,
          "headline": "Split buf.rs into separate files",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-28T23:21:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9eb5bd50b8254d34b7e4d64ca283992d6c541833",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to 0.4",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-24T18:35:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b46d3fd32ebdf2059cd29b98aaecd0c79ccbaa2b",
          "body": null,
          "is_bot": false,
          "headline": "Tweak growth algorithm in BytesMut::reserve",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-21T05:07:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c11456185c1d20cac3ea4c741e5e0c50305cfb3",
          "body": "Instead of providing a separate `try_reclaim` function, `reserve` will\nattempt to reclaim the existing buffer before allocating.",
          "is_bot": false,
          "headline": "Combine `reserve` and `try_reclaim`",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-21T03:31:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "128c56ddc48898b3718d3fc200095a7fd743aa4b",
          "body": null,
          "is_bot": false,
          "headline": "Fix link to documentation",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-20T22:33:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c6eadfcb0f44facb32da7e942de86dbb3292faa",
          "body": null,
          "is_bot": false,
          "headline": "More docs and polish",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-20T22:31:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6fe5a1e4ffa7eee2b122d37f2907c69abae8371",
          "body": null,
          "is_bot": false,
          "headline": "Add some missing Bytes impls and fns",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-20T22:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99aafb0a22e4515670f7d3a07cb42b3fd0da2b80",
          "body": null,
          "is_bot": false,
          "headline": "Fix uploading master docs",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-20T20:43:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf5a1bc4f13ea3f066d2b1cf34ab68feb1a744b9",
          "body": "The previous implementation didn't factor in a single `Bytes` handle\nbeing stored in an `Arc`. This new implementation correctly impelments\nboth `Bytes` and `BytesMut` such that both are `Sync`.\n\nThe rewrite also increases the number of bytes that can be stored\ninline.",
          "is_bot": false,
          "headline": "Rewrite `Bytes` / `BytesMut` core implementation",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-20T18:41:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0360f191f81b0e053b8ead0c3625630ab48cabf2",
          "body": null,
          "is_bot": false,
          "headline": "Finish up docs",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-17T20:23:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa06b6dd6aeeffa6da858b2ca6dbcfd7b8aeadfa",
          "body": null,
          "is_bot": false,
          "headline": "More docs",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-17T19:37:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5048eec14330c47561c9bf4d9ce7f9aa4bbf4ff1",
          "body": null,
          "is_bot": false,
          "headline": "Docs & polish for Buf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-17T06:15:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "268226051d08b11d195041d04229193930f2c508",
          "body": null,
          "is_bot": false,
          "headline": "Implement Hash and Borrow for Bytes / BytesMut",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-17T00:52:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "646624c1306e69f8748bbc820af3a7e52eacdd3b",
          "body": null,
          "is_bot": false,
          "headline": "Polish API surface",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-17T00:44:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bababa87976c3c6cca4f376e6621542e7434af7b",
          "body": null,
          "is_bot": false,
          "headline": "Remove Take/TakeMut",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-16T18:36:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e0066e8a0da08f99e7e9a66ffa13d83b7a4da1d",
          "body": null,
          "is_bot": false,
          "headline": "Write docs and remove unecessary fns and types",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-16T18:26:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53d1c788e07cb5c52044e6a8929f9d436876fdb6",
          "body": null,
          "is_bot": false,
          "headline": "Start writing docs for bytes",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-15T22:43:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c6ebeba8788f23361f2f3ada87cce450a10d00e",
          "body": "* `drain_to` and `split_off` take &self and return Bytes.\n* `drain_to_mut` and `split_off_mut` take &mut self and return BytesMut",
          "is_bot": false,
          "headline": "Provide two versions of drain_to and split_off",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-15T20:46:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8da9e814698a62fd7530d223a61f59385a3e1974",
          "body": null,
          "is_bot": false,
          "headline": "Tweak CI settings",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-15T17:45:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36c9a8c287ddd4859d9b0e74ccd671e7ced24c6c",
          "body": null,
          "is_bot": false,
          "headline": "Support static refs and inline short byte slices",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-15T17:38:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44d40d34d790cc25c4f32538499ae8547f778dba",
          "body": null,
          "is_bot": false,
          "headline": "Cleanup Bytes",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-10T20:04:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70fed562eb20b981ccf5c071cb1d6eeb28c46bfe",
          "body": null,
          "is_bot": false,
          "headline": "Update byteorder to 1.0",
          "author_name": "Aaron J. Todd",
          "author_login": "aajtodd",
          "committed_at": "2017-02-06T19:58:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "accc8a460da86f25689e3e8f7eb8dae0d711435e",
          "body": null,
          "is_bot": false,
          "headline": "Add explicit inlines",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-02-03T19:22:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b01298806a599ab6b65cbd36060b2b216e1d7f6",
          "body": null,
          "is_bot": false,
          "headline": "Support older Rust versions",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-01-26T22:54:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8320da0f8af8ca1da92ce6d998ebfb90a341a43",
          "body": null,
          "is_bot": false,
          "headline": "Lazily allocate the Arc",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2017-01-26T20:56:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93c08064bb0fab7a68515532ddaebd6d6cadfd86",
          "body": null,
          "is_bot": false,
          "headline": "Fix BytesMut refcounting",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-11-22T18:31:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b796d40e9de5b9dafb024af34c4a51358598b77",
          "body": null,
          "is_bot": false,
          "headline": "added clone to ByteBuf and BytesMut along with simple clone test",
          "author_name": "Rick Richardson",
          "author_login": "rrichardson",
          "committed_at": "2016-11-21T23:43:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12d0804f17d47263e59b013a84dca57fc0202266",
          "body": null,
          "is_bot": false,
          "headline": "Fix building docs",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-11-18T18:14:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4886b445165dc4a1777752836104a274e348961e",
          "body": null,
          "is_bot": false,
          "headline": "Add more conversion impls",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-11-03T05:27:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a367a723d824e5a21bf08a94980522f16a91430e",
          "body": null,
          "is_bot": false,
          "headline": "Impl IntoBuf for Bytes and BytesMut",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-11-02T21:33:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11fe277c0d14727cc67edafc323835f7c86ffa1b",
          "body": null,
          "is_bot": false,
          "headline": "Remove default for SliceBuf<T>",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-11-02T21:31:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57e84f267b10f310eb752e733f524659594cf0fc",
          "body": "This commit is a significant overhaul of the library in an effort to head\ntowards a stable API. The rope implementation as well as a number of buffer\nimplementations have been removed from the library and will live at\nhttps://github.com/carllerche/bytes-more while they incubate.\n\n**Bytes / BytesMut*\n[…]\nsidered a suitable replacement.\n\n**Removed types**\n\nThe following types have been removed in favor of living in bytes-more\n\n* RingBuf\n* BlockBuf\n* `Bytes` as a rope implementation\n* ReadExt\n* WriteExt",
          "is_bot": false,
          "headline": "Restructure and trim down the library",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-11-02T21:23:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d717fde5cae1daa2d3369e1ed7c84f735cc926ad",
          "body": null,
          "is_bot": false,
          "headline": "Fix `remaining`",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-26T03:09:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b42d94c33baacf9ac90299497459ca8a6b4ac204",
          "body": null,
          "is_bot": false,
          "headline": "Add BoundBuf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-15T03:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d2508bfebb57df15d2bbaa9e5f3433d18af6685",
          "body": null,
          "is_bot": false,
          "headline": "Tweak Bytes helpers",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-15T03:42:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec7d7f27fe04ca220caafd6691b06690cca7b698",
          "body": null,
          "is_bot": false,
          "headline": "Add Bytes::from_vec",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-15T03:07:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7306d949bb90a48479aa900272654b696bdf801",
          "body": null,
          "is_bot": false,
          "headline": "Rename slice_buf.rs -> slice.rs",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-15T03:07:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4bfc63de7ca923ac5e03dc3a14a16c9aa45d23d",
          "body": null,
          "is_bot": false,
          "headline": "Tweak Sink / Source",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-07T22:37:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f97d04077b9dec5f67f3749f6ed753bbfe340fa",
          "body": null,
          "is_bot": false,
          "headline": "Add IntoBuf impls for non-ref types",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-07T21:44:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e00c08c6c7bff31309870d9e8bf55cfae2e5fc67",
          "body": null,
          "is_bot": false,
          "headline": "Impl IntoBuf for &'static [u8]",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-10-07T19:55:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1c7f183ca6abd0537a33205fce09dd80c5a1c58",
          "body": null,
          "is_bot": false,
          "headline": "Impl IntoBuf for ()",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-30T16:58:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ca7e0fabf3717a033bb57698164caa0f84bb79f",
          "body": null,
          "is_bot": false,
          "headline": "Add IntoBuf trait",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-26T05:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b10992a5e86f295ad5e4f274e25d22a05169b331",
          "body": null,
          "is_bot": false,
          "headline": "Refactor RingBuf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-26T05:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1dc10e9079b7034e3c2b581f673225cefd5aa13",
          "body": null,
          "is_bot": false,
          "headline": "Rename & refactor ByteBuf -> SliceBuf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-26T05:40:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c16ad2bc9d316b379ad93c66caf95e3426c79c6a",
          "body": null,
          "is_bot": false,
          "headline": "Add some docs",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-23T21:53:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7d38e29e5f2601307d1265700fa6802854ada0c",
          "body": null,
          "is_bot": false,
          "headline": "Remove extra lifetime sigils",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-23T21:51:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98e0d954b59b7c332ebe599c99aab95dbb87dd00",
          "body": null,
          "is_bot": false,
          "headline": "Reorganize crate",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-23T19:05:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d05bfb6346e3eb5eebc9f6016c32fede20ba3831",
          "body": null,
          "is_bot": false,
          "headline": "Add more Buf helpers",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-23T14:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c58b0c75cd6b89bd67570a604f667295d157945",
          "body": null,
          "is_bot": false,
          "headline": "Add take fn to Buf & MutBuf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-22T03:41:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "410590124431aba2af70f8926e38739b2daf2c49",
          "body": null,
          "is_bot": false,
          "headline": "Rename RingBuf::new -> with_capacity",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-20T20:42:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f188b56280e71adfaccaf67dd55cd89f593a067",
          "body": null,
          "is_bot": false,
          "headline": "fix dropping front block in BlockBuf",
          "author_name": "Nikolay Kim",
          "author_login": "fafhrd91",
          "committed_at": "2016-09-13T22:30:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f693e038d9ad3042c0a68bb3ef609117b1d7a86a",
          "body": "Fixes #46",
          "is_bot": false,
          "headline": "Fix buffer overflow in Sink for Vec<u8>",
          "author_name": "Stefan Bühler",
          "author_login": null,
          "committed_at": "2016-09-03T20:25:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0d27bd5401c3953ec8446560de33121611fbf1d",
          "body": null,
          "is_bot": false,
          "headline": "Bump min supported Rust version",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-09-03T20:24:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "046c8645431ae2ffa25aad549f6a0d6e2df44930",
          "body": null,
          "is_bot": false,
          "headline": "Integrate with byteorder",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-31T19:07:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38abb8074b87f226c32213ebb1bee7752b43278c",
          "body": null,
          "is_bot": false,
          "headline": "Create ByteBuf with MutByteBuf::with_capacity",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-23T21:22:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be23af6bb7492d18ddc3696bac829d66db361ca7",
          "body": null,
          "is_bot": false,
          "headline": "Remove stable heap for now",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-11T08:38:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbebb19a02d14cb57d4283e0e312f0dacece2d0e",
          "body": "Not having `unsafe_no_drop_flag` caused some weirdness with optimizing buffers\nand bytes. For now, remeove it.",
          "is_bot": false,
          "headline": "Simplify allocation strategy for now",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-11T08:36:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04e0ac75e27bdf4e538e7e6309dd433155cf9fb5",
          "body": "* Get rid of `ByteStr` trait\n* `Bytes` is not a concrete type\n* Add `BlockBuf`\n* Delete lots of cruft\n* Performance work",
          "is_bot": false,
          "headline": "Huge overhaul of `bytes`",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-10T22:45:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2efe63c70766a5c70bfe734d4bdd80ecd45913a",
          "body": null,
          "is_bot": false,
          "headline": "Get rid of SliceBuf",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-06T05:49:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16b4266c3cfb4ffc54369f13da5b7c4174e9f65d",
          "body": null,
          "is_bot": false,
          "headline": "Improve Buf/MutBuf impl for Cursor",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-06T05:19:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6a424d8921cb53b1426623b5734a4dc604924e5",
          "body": null,
          "is_bot": false,
          "headline": "Get rid of BufError",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-06T04:54:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6529f6392a9717585b8d67e1db96e6fa0fb6cb1f",
          "body": null,
          "is_bot": false,
          "headline": "Remove traits mod",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-08-06T04:42:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f68c4bd273277e8d7790fa59d4376ff58302662",
          "body": null,
          "is_bot": false,
          "headline": "Bump minimum supported Rust version",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-07-23T17:03:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eec203c118ab123ede4ff8f9b35179297aeb883e",
          "body": null,
          "is_bot": false,
          "headline": "Use latest stable-heap git",
          "author_name": "Carl Lerche",
          "author_login": "carllerche",
          "committed_at": "2016-07-23T17:00:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 4,
      "commits_last_year": 0,
      "latest_release_at": "2017-03-15T16:36:52Z",
      "latest_release_tag": "v0.4.1",
      "releases_from_tags": true,
      "days_since_last_push": 2418,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 3420,
      "mean_days_between_releases": 254.8
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "bytes",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "buffers",
            "io",
            "zero-copy",
            "data-structures",
            "network-programming"
          ],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/bytes",
          "is_deprecated": false,
          "latest_version": "1.12.1",
          "repository_url": "https://github.com/tokio-rs/bytes",
          "versions_count": 59,
          "total_downloads": 884929906,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 68054965,
          "first_published_at": "2015-01-30T08:04:59.453916Z",
          "latest_published_at": "2026-07-08T10:01:28.616466Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 18
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 1,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml"
      ],
      "largest_source_bytes": 67992,
      "source_files_sampled": 20,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "tracing-subscriber",
            "direct": false,
            "version": "0.3.19",
            "severity": "low",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-xwfj-jgwm-7wp5",
              "RUSTSEC-2025-0055"
            ],
            "fixed_version": "0.3.20",
            "advisory_count": 2,
            "oldest_advisory_days": 331
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1
        },
        "advisory_count": 2,
        "affected_count": 1,
        "assessed_count": 31,
        "malicious_count": 0,
        "assessed_package": "crates:bytes@1.12.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "byteorder",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.0"
        },
        {
          "name": "iovec",
          "manifest": "Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "carllerche",
          "commits": 151,
          "avatar_url": "https://avatars.githubusercontent.com/u/6180?v=4"
        },
        {
          "type": "User",
          "login": "fhartwig",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/83271?v=4"
        },
        {
          "type": "User",
          "login": "alexcrichton",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/64996?v=4"
        },
        {
          "type": "User",
          "login": "danburkert",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/160242?v=4"
        },
        {
          "type": "User",
          "login": "stepancheg",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/28969?v=4"
        },
        {
          "type": "User",
          "login": "aajtodd",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/5158304?v=4"
        },
        {
          "type": "User",
          "login": "dpc",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/9209?v=4"
        },
        {
          "type": "User",
          "login": "jamesjb",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/2334272?v=4"
        },
        {
          "type": "User",
          "login": "bonifaido",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/23779?v=4"
        },
        {
          "type": "User",
          "login": "fafhrd91",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/598990?v=4"
        }
      ],
      "contributors_sampled": 17,
      "top_contributor_share": 0.83
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "0b4185c716efda131812c67e73a1ca05f89af3e8",
        "ran_at": "2026-07-26T20:06:07Z",
        "aggregate_score": 2.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/sfackler/bytes",
    "host": "github.com",
    "name": "bytes",
    "owner": "sfackler"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 0,
            "pct": 85
          }
        }
      ],
      "value": 21,
      "inputs": {
        "security": 42,
        "vitality": 13,
        "community": 12,
        "governance": 36,
        "engineering": 22,
        "abandonment_cap": null,
        "abandonment_state": "at_risk",
        "abandonment_multiplier": 85,
        "weighted_overall_before_abandonment": 25,
        "overall_after_abandonment_multiplier": 21
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 13,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 1,
              "days_since_last_push": 2418,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2418 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2418
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 32,
            "inputs": {
              "releases_count": 4,
              "latest_release_tag": "v0.4.1",
              "releases_from_tags": true,
              "days_since_latest_release": 3420,
              "mean_days_between_releases": 254.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "4 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3420 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3420
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~254.8 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 254.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "cap": null,
              "state": "at_risk",
              "guards": [
                "no_open_demand"
              ],
              "signals": [
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 85,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3380,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 3380 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
                "points": 85,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 3380,
                      "count": 2,
                      "signals": "releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 36,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 17,
              "top_contributor_share": 0.83
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 83% of commits",
                "points": 3.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 83
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "17 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 71,
            "inputs": {
              "followers": 986,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "sfackler",
              "public_repos": 175,
              "account_age_days": 5269
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "986 followers of sfackler",
                "points": 21.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 986,
                      "login": "sfackler"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "175 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 175
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "critical",
        "name": "Engineering Quality",
        "value": 22,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "critical",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 42,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 28,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 13,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 5,
              "scorecard_aggregate": 2.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the crates:bytes@1.12.1 runtime dependency closure — what installing the published package pulls in — 31 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "crates:bytes@1.12.1",
                  "assessed": 31
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 97,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 1,
              "assessed_packages": 31,
              "unassessed_packages": 0,
              "affected_by_severity": "low 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: tracing-subscriber 0.3.19 (low)",
                "points": 23,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "tracing-subscriber 0.3.19 (low)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 331 days ago",
                "points": 39,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 331
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 31,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 14
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 43,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 12,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.22,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "22 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 11.7,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 22,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 46,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 67992,
              "source_files_sampled": 20,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/20 source files over 60KB",
                "points": 52.2,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 20,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "crates package 'bytes' points at a different repository (https://github.com/tokio-rs/bytes); excluded from ecosystem scoring",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T20:06:17.798458Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sfackler/bytes.svg",
  "full_name": "sfackler/bytes",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}