tphakala / go-aac

来自 GitHub 依赖图的完整解析依赖集合：2 个直接依赖与 1 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 3 个包，其中也包含从不交付的开发与测试版本固定：0 个存在已知公告，0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "aac",
        "aac-decoder",
        "aac-encoder",
        "audio",
        "audio-codec",
        "codec",
        "dsp",
        "ffmpeg",
        "golang",
        "pure-go"
      ],
      "is_fork": false,
      "size_kb": 4587,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "C": 142473,
        "Go": 880247,
        "Shell": 12436,
        "Python": 2334
      },
      "pushed_at": "2026-07-25T08:52:23Z",
      "created_at": "2026-07-16T07:01:34Z",
      "owner_type": "User",
      "updated_at": "2026-07-25T08:39:50Z",
      "description": "Pure-Go AAC-LC encoder and decoder, ported from FFmpeg. No cgo.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "LGPL-2.1",
      "default_branch": "main",
      "license_spdx_raw": "LGPL-2.1",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "C"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Tomi P. Hakala",
      "type": "User",
      "login": "tphakala",
      "company": null,
      "location": "Muurame, Finland",
      "followers": 78,
      "avatar_url": "https://avatars.githubusercontent.com/u/7030001?v=4",
      "created_at": "2014-03-22T09:31:18Z",
      "is_verified": null,
      "public_repos": 64,
      "account_age_days": 4509
    },
    "license": {
      "state": "standard",
      "spdx_id": "LGPL-2.1",
      "raw_spdx": "LGPL-2.1",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-23T07:01:03Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-21T13:21:30Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-07-20T13:42:40Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-19T19:05:54Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6d9571f305959ab4c3ac4393b56bd92398853397",
          "body": "…gain (#53) (#63)\n\nThe Phase 4 gate scores whole-signal PSNR against the pinned C encoder,\nwhich on castanet material is effectively a sum over the transient\nevents: between clicks both encoders are transparent and contribute\nnothing measurable. One click every 0.45 s left 13 events in the 6 s\npair,\n[…]\n only a contraction-off build does that. Cross-checked\non linux/arm64 (gcc 14, contraction off by default), which reproduces\nevery one of the 24 channel readings to the last printed digit.\n\nCloses #53",
          "is_bot": false,
          "headline": "test(gate): re-condition the Phase 4 castanet cells, one bound rule a…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-25T08:39:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b37166cbf95dad886271d6a4580ad54580567b6e",
          "body": "The FFmpeg pin fixes the source commit but not the compiler, and FFmpeg's\nconfigure never passes -ffp-contract, so every oracle build inherits its\ncompiler's default. GCC in -std=c17 mode, which is what FFmpeg configures,\nselects ISO behaviour and does not contract; Apple clang contracts by\ndefault.\n[…]\nof TestPhase4ToolsGateVsC, to the\n  last printed digit. All 12 cells pass on both hosts, scalar and\n  goaac_simd, including twoloop stereo castanets 192k under the bounds #53\n  widened.\n\nRefs #15, #53",
          "is_bot": false,
          "headline": "ci: pin the oracle's FP contraction, it is part of the pin (#61)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-25T08:25:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19960a9b75a35a94d15adb0cba191d01321f967d",
          "body": "* fix(enc): key the 1.15 cutoff widening on PNS/IS, not on the coder\n\nOutside the NMR rate table the coding bandwidth comes from the per-channel\nrate, and upstream widens that rate by 15% first whenever either the PNS or\nthe intensity stereo tool is enabled:\n\n    if (s->options.pns || s->options.int\n[…]\no the\nnumbers are refreshed to the measured ones (tonal mono 70.89 to 79.42 dB,\ncastanets mono 60.64 to 66.05 dB) with a note on where the new headroom comes\nfrom. The floors themselves are untouched.",
          "is_bot": false,
          "headline": "fix(enc): key the 1.15 cutoff widening on PNS/IS, not on the coder (#60)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-25T07:42:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d0ec829406f2b7e248e6592df00d4e8329d4d973",
          "body": "The PNS noise energy accumulator carried a comment saying the C reference\nfuses its multiply-add, so the naive Go form was the matching translation\nand a rounding guard must not be added. That was calibrated against the\ndarwin oracle, which is Apple clang and defaults to -ffp-contract=on.\nIssue #15 \n[…]\nh swaps coded content for\nnoise, so an error there is audible rather than subtle.\n\ntwoloop_search.bin and twoloop_stereo.bin are unchanged, byte for byte,\nregenerated from the pinned tree to prove it.",
          "is_bot": false,
          "headline": "fix(pns): stop scalarProduct fusing the multiply-add on arm64 (#58)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-24T22:02:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ea4d58bd3d0f6abaed29219a5f18600de156564",
          "body": "* feat: SIMDEnabled reporting which kernel set was compiled in (#52)\n\nBuilding with -tags goaac_simd swaps the NMR trellis and AbsPow34 for SIMD\nkernels whose output is byte-identical, so a scalar build is indistinguishable\nfrom a tagged one at run time and a consumer can ship the slow path without\n\n[…]\nnt\n\nAn earlier repair of a dropped word in this paragraph left \"package\" stranded\non a line of its own, which pkg.go.dev renders verbatim. Rewrap the paragraph\nand reflow the closing sentence with it.",
          "is_bot": false,
          "headline": "feat: SIMDEnabled reporting which kernel set was compiled in (#56)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-24T21:44:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b93bc1794b87cb2d23196a650eb8ffe6b5bf525",
          "body": "…(#54)\n\nReset salvages the reusable heap objects (MDCT contexts, psy context, bit\nwriter) across its struct wipe so a pooled encoder stays allocation-light.\nThe ~99 KiB coder.NMRState was the exception: it was salvaged into a local\nbefore the wipe but only assigned back to e.nmr inside the CoderNMR \n[…]\n CoderFast stream's Stats(); the new test pins both\nguards against exactly that.\n\nNo bitstream effect: the encoded stream is byte-identical for all three\ncoders at 44100 and 48000 Hz, mono and stereo.",
          "is_bot": false,
          "headline": "perf(enc): retain the NMR state across a coder switch on Reset (#45) …",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-24T21:22:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b77b460ede58ac1e88b97eb871473babc75df427",
          "body": "…g (#50)\n\n* feat(pcm): FrameEncoder emitting raw access units, for MP4/fMP4 muxing\n\npcm.Encoder emits ADTS, which is self-framing and exactly right for a\nstandalone stream. Muxing AAC-LC into MP4 needs the opposite: raw access\nunits with their boundaries reported out of band, plus the\nAudioSpecificC\n[…]\non test to rate-control decisions. TestFrameEncoderGoldenAccessUnits\nis the deliberate bitstream anchor, with a comment saying when to regenerate\nit; the example now shows only the stable API surface.",
          "is_bot": false,
          "headline": "feat(pcm): FrameEncoder emitting raw access units, for MP4/fMP4 muxin…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-21T15:43:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1194798b033b2d69e5f25bd12bbc24b4ac4c84a0",
          "body": "* docs: correct the coder characterization; export DefaultBitrate\n\nTwo small public-API accuracy fixes, verified against the pinned FFmpeg\ntree at d09d5afc3a rather than against FFmpeg's released documentation.\n\nCoder docs (#40). The docs claimed the coders run \"from best quality to\nfastest\". That o\n[…]\n lose a widening the C applies. Claiming\nfidelity here would have been wrong.\n\nNumbers measured by running the real encoder against a verbatim\ntranscription of aacenc.c:1592-1616, not derived by hand.",
          "is_bot": false,
          "headline": "docs: correct the coder characterization; export DefaultBitrate (#48)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-21T13:18:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33daa7ed0c53a6cb968fe00928e533f0bf2dc1c4",
          "body": "… allocs/op) (#46)\n\nMake the psychoacoustic model reusable across enc.Encoder.Reset so pcm.EncodeInterleaved is allocation-free on pooled reuse (3 to 0 allocs/op, B/op -77.7%, sec/op -2.75%, p<=0.002), output byte-identical. Closes #41.",
          "is_bot": false,
          "headline": "perf: reuse the psy context across encoder Reset (EncodeInterleaved 0…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-20T13:31:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d30cf35570d57664d6dff8a4afc947d79df98db",
          "body": null,
          "is_bot": false,
          "headline": "docs: show combined goaac_simd full-encode speedup (both kernels)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-19T19:03:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "101fda0a2a0643894c33ce9fab673d4e100f4f73",
          "body": "* perf: SIMD AbsPow34 via f32.AbsPow34 (-2.7% to -4.6% x86_64)\n\nVectorize the elementwise magnitude kernel dsp.AbsPow34 (out[i] =\n|in[i]|^(3/4)) behind the existing goaac_simd build tag via\ngithub.com/tphakala/simd v1.5.0 f32.AbsPow34 (AVX on x86_64, NEON on\narm64, portable Go fallback). The primiti\n[…]\nn top of AbsPow34 cost +1.48%\nnmr_notools), so it is dropped here and left scalar, pending a generic\nfused single-pass primitive.\n\n* fix: use range-over-int in AbsPow34 equiv test (golangci ruleguard)",
          "is_bot": false,
          "headline": "perf: SIMD AbsPow34 via f32.AbsPow34 (-2.7% to -4.6% x86_64) (#43)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-19T18:59:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0864142aff97975aed22dc855cdc32e20153593b",
          "body": "…4) (#42)\n\nVectorizes nmrTrellisStep (the encoder's 34.7% hot leaf) behind the goaac_simd build tag via github.com/tphakala/simd f32.MinIdxOfSumRows (AVX2/NEON, portable Go fallback). Byte-identical to the scalar kernel, 0 allocs/frame, scalar stays the default. Measured full-encode -14.1% Pi 5 (NEON) and -22.1% i7-1260P (AVX2). Gated by the differential sweep, geometry test, and a fuzz target under the tag, plus tagged CI test/vet/build/lint/oracle. Closes #38.",
          "is_bot": false,
          "headline": "perf: SIMD NMR trellis via f32.MinIdxOfSumRows (-14% Pi 5, -22% x86_6…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-19T16:47:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ba70b362f2d53a869e259eee4abc641bb1c8cc5",
          "body": null,
          "is_bot": false,
          "headline": "docs: link go-m4a, the pure-Go MP4/M4A container companion",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-19T08:07:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e3d7a7989615c7179d5b7ea1a018f25ad14c65a",
          "body": "Add EncoderDelay, a public const equal to FrameSize (1024), and an\nEncoder.Delay() method that reports it. Both document the leading priming\nsamples per channel a muxer trims: an MP4 edit list media_time, or an\niTunSMPB priming field. The delay is structurally one frame and is a\nproperty of the AAC-\n[…]\n_test.go encodes whole frames, drains, decodes every\naccess unit and asserts decoded-minus-input equals EncoderDelay for mono\nand stereo, plus a cross-correlation lag peak at EncoderDelay.\n\nCloses #27",
          "is_bot": false,
          "headline": "feat: expose the encoder priming delay for muxers (#36)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T20:38:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dfc451abbc9c6d8aef10705e17dc9fbcf6c266ee",
          "body": "Add three inlinable scalar helpers to internal/fmath (no math import, so\nthe per-frame package fence stays intact):\n\n  Absf(x)         = max(x, -x)\n  Clipf(v, lo, hi) = min(max(v, lo), hi)\n  Clipi(v, lo, hi) = min(max(v, lo), hi)\n\nDelete the per-package duplicate absf/clipf/clipi definitions in psy,\n[…]\nfied byte-identical against the pinned FFmpeg\noracle: every package passes GOAAC_REQUIRE_ORACLE=1, proving the encoder\nand decoder output is unchanged. All three helpers confirmed inlined.\n\nCloses #16",
          "is_bot": false,
          "headline": "refactor: unify FFMIN/FFMAX/abs idioms into internal/fmath helpers (#35)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T20:36:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "98cd573eb8b588f881fff425e1083032f92f99df",
          "body": "In raw mode, flen was read from the file with no lower-bound check.\nA zero-length frame left av_new_packet's pkt->data NULL, so the\nfollowing memcpy had a NULL destination, and each such frame let the\nloop burn through the rest of the input doing wasted alloc/decode\ncycles instead of stopping. ADTS mode gets the same guard for\nsymmetry even though ff_adts_header_parse already rejects a\nzero-length frame before this point.\n\nCloses #28",
          "is_bot": false,
          "headline": "fix: reject zero-length frames in the cdec raw-mode decode loop (#37)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T20:36:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96b5b3bc81f2690fdc85d5bfcd2c8e7a96890559",
          "body": "av_mallocz for avctx->extradata was used with memcpy right after it\nwith no NULL check, so an allocation failure would dereference NULL.\nAdd a check that reports the failure and returns before the memcpy.\nAlso cast alen to size_t in the allocation size expression to remove\na -Wconversion int to size_t promotion warning on the same line.\n\nCloses #5",
          "is_bot": false,
          "headline": "fix: check extradata allocation before memcpy in tools/cdec (#30)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T19:09:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a62c67ea30cc2d98f53b652fd6be6fc8c78d048",
          "body": "The re-slice idiom in[:len(out)] validates capacity, not length, so a source shorter than the destination but with spare capacity was silently extended and the loop read stale data past the source's end. That is silent audio corruption. Each kernel now checks its sources against the destination leng\n[…]\nw destination-governed like the rest, matching Go's copy convention. Both current callers pass equal lengths, so output stays byte-identical and the full FFmpeg differential remains green.\n\nCloses #17",
          "is_bot": false,
          "headline": "fix: enforce destination-length contract in dsp kernels (#31)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T19:09:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f56108bbf7eb6902b1ecbfb53b0cec59fb8445b",
          "body": "Add a Coder field to pcm.Config so ADTS encoding is no longer locked to\nCoderNMR. The zero value stays aac.CoderNMR, so existing output is\nbyte-identical; CoderTwoLoop and CoderFast trade quality for speed.\n\nConfig.validate rejects an unknown coder, and encoderConfig now forwards\nCoder to the low-le\n[…]\ny EncodeInterleaved. New tests cover validation,\nhigh-level versus low-level plumbing parity for all three coders, the\nzero-value-is-NMR invariant, and coder flow-through on encoder reuse.\n\nCloses #26",
          "is_bot": false,
          "headline": "feat: expose coder selection through pcm.Config (#34)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T19:08:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e9977f377aed08901f3f65b35a8e36066fec801",
          "body": "…ent (#32)\n\nint32(NaN) is architecture-dependent (0 on arm64, -2^31 on amd64), so a NaN\nin input PCM could make encoder output differ between arm64 and amd64. A NaN\nplaced in the lookahead region taints the current frame's psy analysis one\nframe before the post-MDCT spectral guard fires, so a NaN-in\n[…]\nN and true-branches on +/-Inf. This\nmatches the documented API contract and closes the hole the post-MDCT guard\ncannot reach. No float arithmetic changed, so bit-exact output is preserved.\n\nCloses #18",
          "is_bot": false,
          "headline": "fix: reject non-finite PCM input so encoder output is GOARCH-independ…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T19:08:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1021cb2b9bf78f374e0a749d77dee42af2f677cb",
          "body": "quantizeAndEncodeBandCost is the encoder's hottest function but had no\ndedicated microbenchmark, so its per-call cost had no regression signal\nof its own. BenchmarkQuantizeBandCost drives it through quantizeBandCost\nin the real search configuration (scaled precomputed, uplim disabled)\nacross the size and codebook shapes the encoder actually produces.\n\nCloses #24",
          "is_bot": false,
          "headline": "test: add a microbenchmark for quantizeAndEncodeBandCost (#33)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T19:08:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3676e0e4bbd33792dabff97fb14e384c9ba31bbf",
          "body": "BenchmarkNMRTrellisStepShapes measured step2, which nmrSolve never\ncalls, and never measured step8 (nmrCoarse, the coarse pass that\nnmrSolve always calls first). All shapes also hardcoded base 0, so the\nwindow clip path in nmrTrellisStep was never exercised.\n\nSwap the step2 shape for step8 and add a step8 shape with base 45 to\ndrive a clipped window. Test only, no bit exactness surface.\n\nCloses #22",
          "is_bot": false,
          "headline": "test: benchmark the trellis step shapes the encoder actually uses (#29)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-18T19:07:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08eca90dcfd7c0a018c658bea3cb57bc5a39a8ed",
          "body": "…9% Pi 5, -3.0% x86_64) (#25)\n\n* perf: hoist invariant table loads in quantizeAndEncodeBandCost\n\nThe C compiles nine specializations of quantize_and_encode_band_cost_template\nwith dim, the codebook range and the per-book tables baked in as constants. The\nGo port folds them into one table-driven body\n[…]\nThe provenance comment cited aaccoder.c:75-200; the template\nbody actually spans 75-193.\n\nOutput is byte-identical to FFmpeg d09d5afc3a, re-verified by the full C\ndifferential oracle after the change.",
          "is_bot": false,
          "headline": "perf: specialize quantizeAndEncodeBandCost by codebook dimension (-8.…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-17T20:01:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "054d63370ebd5d0fd4765db409a2172bab9cfa4e",
          "body": "…-10.7% x86_64) (#21)\n\nnmr_trellis_step_c tests |d| <= mdiff once per inner iteration. d is affine in\nop and falls by step as op rises, so the surviving op form one contiguous range\nwhose offsets from o can be computed once per call. Iterating exactly that range\nvisits the same pairs in the same inc\n[…]\nnned by a differential sweep against a verbatim transcription\nof the C over 774,592 parameter combinations, covering the window edges, both\nstep signs, step 0, mdiff 0, and the empty window.\n\nRefs #11",
          "is_bot": false,
          "headline": "perf: computed trellis window bounds in nmrTrellisStep (-12.6% Pi 5, …",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-17T14:23:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8d70f6c96669ec61ffc2d74d88eaac9eff68a231",
          "body": "…A76) (#20)\n\nWriting the sign test as \"isSigned && in[i] < 0\" blocks branchelim: the &&\nform's merge block has three predecessors, and the pass only rewrites\ntwo-predecessor diamonds, so the inner data-dependent test compiles to a real\nbranch. Nesting the two tests leaves a clean diamond, and the in\n[…]\ns defined wrapping, so the one value that overflows makes both CMOV\ninputs bit-identical.\n\nInline cost is unchanged at 60 of 80, so the kernel still inlines into\nquantizeAndEncodeBandCost. Closes #14.",
          "is_bot": false,
          "headline": "perf: branchless sign apply in QuantizeBands (~2% x86_64, <1% Cortex-…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-17T13:08:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fab9024e2652985d41922bc3b1c7670b7bfe7a14",
          "body": "…) (#19)\n\nThe clamp in QuantizeBands ran as a compare and branch with float32(maxval)\nrecomputed inside the loop. Expressing it as min() and hoisting the conversion\nlowers to a single FMINS on arm64 and removes the branch on both targets.\n\nThe win is the branch, not the conversion. The clamp is data\n[…]\nusly passed the entire suite, the\nC differential oracle included. It now fails.\n\nFollow-ups filed: #14 (the sign negate is the loop's last data-dependent\nbranch), #18 (int32(NaN) is GOARCH-dependent).",
          "is_bot": false,
          "headline": "perf: express QuantizeBands' clamp as min() (-5.5% Pi 5, -6.7% x86_64…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-17T12:08:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33375bc6f318a61206d851b74a5703b93732c7ea",
          "body": "A 2.9 MB linux/386 ELF binary was committed to the repo root in #12. It came\nfrom `go build ./tools/wav2aac/` run without -o during a cross-compile check:\nthat writes the binary to the current directory, not the package directory, so\nit landed at the repo root where nothing in .gitignore covered it.\n[…]\nn\nrecur.\n\nNote the blob remains in history and still costs ~2.9 MB on clone; removing it\nwould need a history rewrite of main, which is the owner's call and is not\nworth it for a non-sensitive object.",
          "is_bot": false,
          "headline": "fix: remove a stray wav2aac binary and close the gitignore gap (#13)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-17T08:41:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c988bf94d5fe3cb5fa4f5ca2c16394b50f025dc",
          "body": "….4% on Pi 5) (#12)\n\n* perf: comparative benchmark against the C, plus the profiling harness\n\ngo-aac had no comparative benchmark against the encoder it ports, unlike\ngo-flac (which compares against libFLAC, SoX and ffmpeg) and go-opus (which\npublishes a Go-vs-C table). The README reported only self\n[…]\n. Verified it works here, and\ngo-flac's shipped script uses the same pattern.\n\nEncoder output remains byte-identical and the oracle-gated differential still\npasses; 32-bit arm and 386 builds verified.",
          "is_bot": false,
          "headline": "perf: comparative benchmark vs the C, and a bit-exact cbrt table (-22…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-17T08:38:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f2ea9640a808832e149411c21f7c7a3ae101060d",
          "body": "… (#4)\n\n* tools/cdec: check fseek, ftell, av_mallocz and av_new_packet\n\nread_all ignored the fseek and ftell results and never checked\nav_mallocz for NULL, so a failed seek or an allocation failure would\nmisbehave rather than error cleanly. The decode loop ignored\nav_new_packet's return value, which\n[…]\n binary\", and fails with that same reason\nunder GOAAC_REQUIRE_ORACLE, instead of dying at the first exec. The hook\nstill refuses a work-email commit and passes a clean branch. Full oracle\nsuite green.",
          "is_bot": false,
          "headline": "tech debt: run the differential oracle on CI, harden the cdec harness…",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-16T07:48:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "079129b2342ae9788890179d96c0378a1d8de67a",
          "body": "The tagline, the Approach section, and the port-in-progress note still described\nan encoder-only project. Update them for the completed AAC-LC codec: encoder\nplus decoder D0-D3 (public pcm.NewDecoder), both bit-exact against\nffmpeg -c:a aac_fixed. Add a decoder row to the differential-validation table\nand decoder throughput to the benchmarks.",
          "is_bot": false,
          "headline": "docs: reflect the shipped AAC-LC decoder in README",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-15T18:33:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e91fd2308efea990d0dc9aff8e12e84d688d9d53",
          "body": "Public streaming decode API mirroring go-flac: pcm.NewDecoder streams an ADTS (or raw plus ASC) AAC-LC stream to interleaved little-endian S16 PCM, byte identical to ffmpeg aac_fixed across the corpus and on Apple afconvert output, with no cgo. Recover-free hardening with wrapped sentinels, native f\n[…]\nwed through CodeRabbit, Gemini, Copilot and an adversarial agy pass; the one real bug found (a pooled decoder retaining a stale channel element across a stereo to mono reconfigure) is fixed and gated.",
          "is_bot": false,
          "headline": "D3: public AAC-LC decode API, hardening, and fuzzing (#5)",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-15T18:18:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f461d4ef47299e00fc8f741594d7d7c9106a9f3",
          "body": "Fixed-point AAC-LC reconstruction core: dequantization (vector_pow43 plus subband_scale), PNS noise fill, mid/side and intensity stereo, TNS, and the S32P clip, wired through D1's IMDCT and windowing. Gated byte-identical against ffmpeg aac_fixed across 11 streams (12,969,984 reconstructed integer values, 0 mismatches), lint 0, oracle PSNR unchanged. Reviewed by CodeRabbit, Gemini, Copilot, and an adversarial agy pass.",
          "is_bot": false,
          "headline": "D2: LC decode core, output identical to ffmpeg aac_fixed",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-15T16:04:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0de63b33ce12152003d974336cfe9ead11289be1",
          "body": "A pure-Go port of FFmpeg's AAC-LC codec, no cgo and no external libraries in\nthe published module, kept honest by differential testing against the real C\nat a pinned commit (d09d5afc3a).\n\n- Encoder: complete for AAC-LC. All three FFmpeg coders (NMR, twoloop, fast),\n  all four coding tools (TNS, PNS,\n[…]\nation, tool\n  application, PCM reconstruction and the public decoder API are still to come.\n\nSee PROVENANCE.md and LICENSE for the FFmpeg provenance and licensing\n(LGPL-2.1-or-later, derivative work).",
          "is_bot": false,
          "headline": "Pure-Go AAC-LC encoder and decoder (D0/D1), ported from FFmpeg",
          "author_name": "Tomi P. Hakala",
          "author_login": "tphakala",
          "committed_at": "2026-07-15T13:13:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 4,
      "commits_last_year": 33,
      "latest_release_at": "2026-07-23T07:01:03Z",
      "latest_release_tag": "v0.4.0",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 2,
      "days_since_latest_release": 3,
      "mean_days_between_releases": 1.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/tphakala/go-aac",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/tphakala/go-aac",
          "is_deprecated": false,
          "latest_version": "v0.4.0",
          "repository_url": "https://github.com/tphakala/go-aac",
          "versions_count": 5,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T15:43:06Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 3,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 13
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Taskfile.yml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 77634,
      "source_files_sampled": 195,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 3,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/quasilyte/go-ruleguard/dsl",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.23"
        },
        {
          "name": "github.com/tphakala/simd",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/quasilyte/go-ruleguard/dsl",
            "direct": true,
            "version": "v0.3.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tphakala/simd",
            "direct": true,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 3,
        "direct_count": 2,
        "indirect_count": 1
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 27,
        "open_issues": 13,
        "closed_ratio": 0.649,
        "closed_issues": 24,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "tphakala",
          "commits": 33,
          "avatar_url": "https://avatars.githubusercontent.com/u/7030001?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yaml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "27 out of 27 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6d9571f305959ab4c3ac4393b56bd92398853397",
        "ran_at": "2026-07-27T04:39:29Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T08:42:43Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-25T08:39:37Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 2,
          "created_at": "2026-07-16T07:02:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 6,
          "created_at": "2026-07-17T06:55:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 8,
          "created_at": "2026-07-17T06:56:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 9,
          "created_at": "2026-07-17T06:56:52Z",
          "last_comment_at": "2026-07-19T17:13:24Z",
          "last_comment_author": "tphakala"
        },
        {
          "number": 10,
          "created_at": "2026-07-17T07:17:43Z",
          "last_comment_at": "2026-07-17T13:12:38Z",
          "last_comment_author": "tphakala"
        },
        {
          "number": 11,
          "created_at": "2026-07-17T07:44:21Z",
          "last_comment_at": "2026-07-17T20:02:25Z",
          "last_comment_author": "tphakala"
        },
        {
          "number": 23,
          "created_at": "2026-07-17T14:06:03Z",
          "last_comment_at": "2026-07-18T20:51:12Z",
          "last_comment_author": "tphakala"
        },
        {
          "number": 39,
          "created_at": "2026-07-19T08:00:11Z",
          "last_comment_at": "2026-07-20T12:44:47Z",
          "last_comment_author": "tphakala"
        },
        {
          "number": 55,
          "created_at": "2026-07-24T21:21:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 57,
          "created_at": "2026-07-24T21:28:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 59,
          "created_at": "2026-07-24T21:59:36Z",
          "last_comment_at": "2026-07-25T08:41:56Z",
          "last_comment_author": "tphakala"
        },
        {
          "number": 62,
          "created_at": "2026-07-25T08:25:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 64,
          "created_at": "2026-07-25T08:41:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/tphakala/go-aac",
    "host": "github.com",
    "name": "go-aac",
    "owner": "tphakala"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 57,
      "inputs": {
        "security": 57,
        "vitality": 71,
        "community": 26,
        "governance": 55,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "commits_last_year": 33,
              "human_commit_share": 1,
              "days_since_last_push": 1,
              "active_weeks_last_year": 2
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "2/52 weeks with commits",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "33 commits in the last year",
                "points": 13.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 33
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 4,
              "latest_release_tag": "v0.4.0",
              "releases_from_tags": false,
              "days_since_latest_release": 3,
              "mean_days_between_releases": 1.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "4 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 26,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 1,
              "stars": 3,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (LGPL-2.1)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "LGPL-2.1"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "merged_prs": 27,
              "open_issues": 13,
              "closed_issues": 24,
              "issue_closed_ratio": 0.649,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "65% of issues closed",
                "points": 30.3,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 65
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "27/27 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 27,
                      "decided": 27
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "followers": 78,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "tphakala",
              "public_repos": 64,
              "account_age_days": 4509
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "78 followers of tphakala",
                "points": 13.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 78,
                      "login": "tphakala"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "64 public repos, account ~12 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 64
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/tphakala/go-aac"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "5 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "27 out of 27 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "aac",
                "aac-decoder",
                "aac-encoder",
                "audio",
                "audio-codec",
                "codec",
                "dsp",
                "ffmpeg",
                "golang",
                "pure-go"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "10 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 57,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "27 out of 27 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 3 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 3
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 3,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 3,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 66,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "33 of 33 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 33,
                      "sampled": 33
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Taskfile.yml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Taskfile.yml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Taskfile.yml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 33",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 33
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 77634,
              "source_files_sampled": 195,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/195 source files over 60KB",
                "points": 54.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 195,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T04:39:44.221212Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tphakala/go-aac.svg",
  "full_name": "tphakala/go-aac",
  "license_state": "standard",
  "license_spdx": "LGPL-2.1"
}