公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 02:46 UTC
voicetel / memdb
Embedded Go SQLite that runs in RAM — 3× faster writes, 2× faster reads. Snapshot + WAL durability, Raft replication, and a PostgreSQL wire-protocol server, all in one library.
voicetel/memdb 的健康指数为 100 分中的 56 分，处于「中等」区间。 其得分最高的类别是Vitality（75/100），最低的是Community & Adoption（23/100）。 最近一次更新在 1 天前。 近期的大部分工作由 1 位贡献者完成。
56
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
56
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
2 关注者42 个公开仓库始于 2014年9月VoiceTel Communications
该仓库由个人账户拥有。相较于组织支持的项目，单一所有者项目的延续性风险更高。
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/voicetel/memdb | v1.10.0 | - | 24 | 4 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
75
开发活跃度
59中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 1 天前 |
| 5.5/36 | 提交节奏 — 52 周中有 8 周有提交 |
| 17.1/18 | 提交量 — 最近一年 80 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 80 |
| human_commit_share | 0.912 |
| days_since_last_push | 1 |
| active_weeks_last_year | 8 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 18 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 4 天前 |
| 27/27 | 发布节奏 — 约每 9.2 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 18 |
| latest_release_tag | v1.10.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 4 |
| mean_days_between_releases | 9.2 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
23
流行度与采用
5危急
评分方式
| 4.9/60 | 星标 — 3 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 3 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
社区健康
44存在风险
评分方式
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件，但不是可识别的许可证 |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
54
维护者韧性（巴士系数）
15危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0.6/22.5 | 提交分布 — 头号贡献者编写了 97% 的提交 |
| 2.7/13.5 | 贡献者广度 — 2 位贡献者 |
| 3/10 | OpenSSF Scorecard：Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.973 |
议题与 PR 响应能力
72良好
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 38.2/38.3 | PR 接受 — 已裁定的 PR 中 7/7 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/23 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 7 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
47存在风险
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 3.4/25 | 所有者影响力 — voicetel 有 2 位关注者 |
| 23.9/25 | 既往记录 — 42 个公开仓库，账户约 11 年 |
所用输入
| followers | 2 |
| owner_type | User |
| is_verified | — |
| owner_login | voicetel |
| public_repos | 42 |
| account_age_days | 4,341 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 4 天前 |
| 20/20 | 版本历史 — 24 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/voicetel/memdb |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 4 |
工程质量
基础的工程与文档实践是否到位？
61
工程实践
68中等
评分方式
| 24/24 | CI 工作流 — 2 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
61
安全态势
51中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/23 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.1 |
已排除计分（无数据或不适用）：packaging, signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 0/25 | 间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 16 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：间接依赖不含已知公告, 没有长期未处理的公告。 其余权重已重新归一化。 已将 16 个已解析依赖与 OSV 比对。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
62
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 73 次人类提交中有 73 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — lockfile |
| 2.5/10 | 已体现的代理实践 — 最近 80 次提交中有 1 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 80 次提交中有 7 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0.013 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.087 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 94 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 40,454 |
| source_files_sampled | 94 |
| oversized_source_files | 0 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
3GitHub 星标
2贡献者
80最近 12 个月提交数
1距最近推送天数
18发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数
更多细节
Star 与 Fork 历史 3 ★ / 0 ⇿
3Star
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
OpenSSF Scorecard 5.1 / 10
5.1综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/23 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
直接依赖 6
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/hashicorp/go-hclog | v1.6.3 | go.mod |
| Go | github.com/hashicorp/raft | v1.7.3 | go.mod |
| Go | github.com/klauspost/compress | v1.19.0 | go.mod |
| Go | github.com/lib/pq | v1.12.3 | go.mod |
| Go | github.com/mattn/go-sqlite3 | v1.14.48 | go.mod |
| Go | github.com/peterh/liner | v1.2.2 | go.mod |
全部依赖 16
来自 GitHub 依赖图的完整解析依赖集合：6 个直接依赖与 10 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| Go | github.com/hashicorp/go-hclog | v1.6.3 | 直接 |
| Go | github.com/hashicorp/raft | v1.7.3 | 直接 |
| Go | github.com/klauspost/compress | v1.19.0 | 直接 |
| Go | github.com/lib/pq | v1.12.3 | 直接 |
| Go | github.com/mattn/go-sqlite3 | v1.14.48 | 直接 |
| Go | github.com/peterh/liner | v1.2.2 | 直接 |
| Go | github.com/armon/go-metrics | v0.4.1 | 间接 |
| Go | github.com/fatih/color | v1.13.0 | 间接 |
| Go | github.com/hashicorp/go-immutable-radix | v1.0.0 | 间接 |
| Go | github.com/hashicorp/go-metrics | v0.5.4 | 间接 |
| Go | github.com/hashicorp/go-msgpack/v2 | v2.1.2 | 间接 |
| Go | github.com/hashicorp/golang-lru | v0.5.0 | 间接 |
| Go | github.com/mattn/go-colorable | v0.1.12 | 间接 |
| Go | github.com/mattn/go-isatty | v0.0.20 | 间接 |
| Go | github.com/mattn/go-runewidth | v0.0.3 | 间接 |
| Go | golang.org/x/sys | v0.19.0 | 间接 |
依赖安全公告 1
该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 16 个包，其中也包含从不交付的开发与测试版本固定：1 个存在已知公告，0 个为直接依赖。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| golang.org/x/sys | v0.19.0 | 间接 | 未知 | 1 | 0.44.0 |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1104,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 948398,
"Makefile": 34361
},
"pushed_at": "2026-07-20T11:10:13Z",
"created_at": "2026-04-23T19:57:12Z",
"owner_type": "User",
"updated_at": "2026-07-17T14:24:52Z",
"description": "Embedded Go SQLite that runs in RAM — 3× faster writes, 2× faster reads. Snapshot + WAL durability, Raft replication, and a PostgreSQL wire-protocol server, all in one library.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "voicetel.com",
"name": "VoiceTel Communications",
"type": "User",
"login": "voicetel",
"company": "VoiceTel Communications",
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/8617362?v=4",
"created_at": "2014-09-01T16:31:45Z",
"is_verified": null,
"public_repos": 42,
"account_age_days": 4341
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-07-17T14:42:43Z"
},
{
"tag": "v1.9.3",
"kind": "patch",
"published_at": "2026-06-24T20:26:21Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2026-05-21T00:56:46Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-05-07T15:38:57Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-05-07T15:38:41Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-04-26T22:49:10Z"
},
{
"tag": "v1.7.4",
"kind": "patch",
"published_at": "2026-04-26T21:24:43Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-26T16:08:44Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-04-26T13:38:18Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-04-25T19:43:59Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-25T18:15:49Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-04-23T21:26:08Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-04-23T20:24:31Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-23T20:24:09Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-04-23T20:23:54Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-23T20:23:12Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-23T20:22:47Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-04-23T20:22:14Z"
}
],
"recent_commits": [
{
"oid": "073ef17387d089296e13ef17fa82b6ded3fdf9a1",
"body": "- README Config reference: document OnExecResult (and OnExec's 0-count\n limitation); the block still showed the legacy hook only.\n- README architecture diagram: OnExecResult/ExecResult flow, per-replica\n stmt cache, ForwardResponse.RowsAffected.\n- README WAL numbers: 298k -> ~364k writes/s, ~164k \n[…]\ns (v1.10.0 capture).\n- BENCHMARKS: add missing v1.9.3 note; fix v1.9.2's now-wrong claim that\n the headline tables reflect v1.9.1.\n- Project notes: mattn pin text said v1.14.42; go.mod pins v1.14.47.",
"is_bot": false,
"headline": "docs: refresh stale entries missed in the v1.10.0 pass",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-07-17T14:21:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0458ffd4c7e6c189b7e4a0624a76d42b4e5de1d",
"body": "… replica statement cache\n\nRaft-mode rows-affected (unblocks count-gating pg-wire clients, e.g.\nOpenSIPS msilo):\n- Config.OnExecResult: replication hook returning the committed\n statement's rows-affected count; legacy OnExec unchanged, setting both\n is a config error. Exec's sql.Result now reports\n[…]\nn, with the pprof round history and the six measured-but-not-\naddressable hot paths (SQLite cgo floor, WAL fsync, large-DB refresh\ncopy, wire syscall floor, raft consensus overhead, saturation churn).",
"is_bot": false,
"headline": "feat: v1.10.0 — real rows-affected in Raft mode, pg-wire bytea fixes,…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-07-17T14:21:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b19dde2870b2249eceb4e4ef4ea52948c847c95",
"body": "…(#6)\n\nBumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.6 to 1.19.0.\n- [Release notes](https://github.com/klauspost/compress/releases)\n- [Commits](https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0)\n\n---\nupdated-dependencies:\n- dependency-name: gith\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T21:25:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8b288244c37ee0b04f62e5bc7ca9641f21c1a28e",
"body": "…(#7)\n\nBumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.47 to 1.14.48.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.47...v1.14.48)\n\n---\nupdated-dependencies:\n- dependency-name: github.c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T21:25:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e85d8f068b295377e95b3d532390ef94f003b067",
"body": "registerDriver published the generated driver name into the shared\nregisteredDrivers map via LoadOrStore BEFORE calling sql.Register. A\nconcurrent caller could Load that name on the fast path and hand it to\nsql.Open before registration completed, hitting database/sql's\n`sql: unknown driver \"sqlite3_\n[…]\novided. The\nlock-free fast-path Load is unchanged.\n\nTestRegisterDriverConcurrentOpen reproduces the failure (it hits the\nexact \"unknown driver\" error against the pre-fix code) and passes with\nthe fix.",
"is_bot": false,
"headline": "fix(driver): register sqlite driver before publishing its name (race)",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-06-24T20:18:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "52d18a76e197a18019a72d17e68cfb66ff45726e",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:31:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd2454f28b698c819ebd810e38b80668cb93075d",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.45 to 1.14.47.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.45...v1.14.47)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.47\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/mattn/go-sqlite3 from 1.14.45 to 1.14.47",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c6e516bc77822d01503d27bf160c3b40ffd7f64",
"body": "Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.5 to 1.18.6.\n- [Release notes](https://github.com/klauspost/compress/releases)\n- [Commits](https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/klauspost/compress\n dependency-version: 1.18.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T15:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fca99a0b1c6e9fe51ddb2272b649b54836ad6bc6",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.42 to 1.14.45.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.42...v1.14.45)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.45\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.45",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T15:18:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "456c7fe65852e5b9e546696bf9468e6c7e70e65b",
"body": "Bumps [github.com/hashicorp/go-hclog](https://github.com/hashicorp/go-hclog) from 1.6.2 to 1.6.3.\n- [Release notes](https://github.com/hashicorp/go-hclog/releases)\n- [Commits](https://github.com/hashicorp/go-hclog/compare/v1.6.2...v1.6.3)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/hashicorp/go-hclog\n dependency-version: 1.6.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump github.com/hashicorp/go-hclog from 1.6.2 to 1.6.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T15:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "453e08dd2dd4955c1907a908ebb3976c6269b63c",
"body": "Lets us re-run the analysis manually after env-level changes\n(e.g. toggling Default Setup) without making a no-op commit.",
"is_bot": false,
"headline": "ci: add workflow_dispatch trigger to CodeQL workflow",
"author_name": "Michael Mavroudis",
"author_login": "mavroudis",
"committed_at": "2026-06-12T11:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff46fdee4b0575c7b7aa6a8a992c4e72dbb54af8",
"body": "…ECURITY.md)\n\nFirst-pass GitHub Advanced Security wiring; brings this library repo\nonto the same shape used across the voicetel/* fleet:\n\n- .github/dependabot.yml — weekly gomod + github-actions sweeps\n- .github/workflows/codeql.yml — weekly + push/PR scan, go pack,\n autobuild with go-version-file=\n[…]\n.9.x (current v1.9.2 release), reporting URL, and\n scope notes covering the snapshot file model, the PostgreSQL\n wire-protocol server's unauth default, and the Raft mutual-TLS\n rotation expectation",
"is_bot": false,
"headline": "security: add GHAS baseline (Dependabot + CodeQL + dep-submission + S…",
"author_name": "Michael Mavroudis",
"author_login": "mavroudis",
"committed_at": "2026-06-12T10:56:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d901791384cc26aa18fe529d668a0d6e541c51f1",
"body": "Adds a v1.9.2 section to BENCHMARKS.md covering what landed since\nv1.9.1 — divergence metric, TestPProf_LargeDB_MixedRW characterisation\nof large-DB workloads, errcheck cleanup, and a documented dead-end\nwhere two attempts to eliminate the C→Go→C refresh round trip\nregressed throughput 40–90×. Headl\n[…]\nenchmark numbers from v1.9.1\nremain accurate; v1.9.2 has no perf-impacting code changes.\n\nREADME \"current report\" pointer rebased from v1.8.0 to v1.9.x.\nProject-structure listing similarly retargeted.",
"is_bot": false,
"headline": "docs: refresh BENCHMARKS.md and README for v1.9.2",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-21T00:42:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c882becba1a44af682da5d78d37cd459bf1d3306",
"body": "…MiB datasets\n\nAdds a new MEMDB_PPROF=1-gated test that seeds 100 000 rows × 1 KiB\n(~97 MiB) and runs a 3-second mixed read+write workload (1 writer +\n8 readers, default 50 ms refresh interval). Captures CPU + heap pprof\nto /tmp / MEMDB_PPROF_DIR.\n\nPurpose: empirical signal for whether session-exten\n[…]\nl-DB workloads the\nexisting v1.9.1 shared-buffer + write-generation short-circuit is\nalready near-optimal.\n\nNo behaviour change. Test is gated on MEMDB_PPROF=1 so it does not\nrun in the default suite.",
"is_bot": false,
"headline": "test(pprof): TestPProf_LargeDB_MixedRW characterises refresh on ~100 …",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:52:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdc86bf8f1d16fcc2973468ae91ecd0aea3a104d",
"body": "…ragglers\n\nFollow-up to 93e27c8 (production errcheck → 0). This sweep catches:\n\n - Test-file findings (memdb_test, memdb_extra_test, memdb_pprof_test,\n memdb_bench_test, memdb_compare_test, server/*_test, replication/raft/*_test,\n logging/syslog_test, profiling/*_test, backends/backends_test,\n[…]\n / Fprintln(...) → prefix with _ = / _, _ =\n\ngolangci-lint errcheck count: 50 (start of day) → 0 (now).\nFull race suite passes including the 38s replication/raft integrity tests.\n\nNo behaviour change.",
"is_bot": false,
"headline": "chore: silence errcheck across test files and remaining production st…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:48:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93e27c8ef6667505f251ee9a1e12a635ea9a0fd9",
"body": "…ross production\n\nPre-existing golangci-lint errcheck findings on Close, os.Remove, and\nFprintln/Fprintf calls in production code (server/, replication/raft/,\nbackends/, backup.go, memdb.go, driver.go, cmd/memdb/, cmd/memdb-cli/,\nbackend.go, examples/quickstart/). Every site is one of:\n\n - defer X.\n[…]\n 0. The remaining 51 findings are all in *_test.go\nfiles and don't ship — addressing those is a separate cleanup pass.\n\nFull -race test suite passes including the 36s replication/raft\nintegrity tests.",
"is_bot": false,
"headline": "chore: silence errcheck on best-effort Close/Remove/Fprintln calls ac…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:20:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ff06f26ed217bd45ba892deadc34241daad22087",
"body": "Brief §8 #2. When replicaPool.refresh fails partway through migrating\nreplicas to a new shared buffer, the rollback may itself fail — leaving\nsome replicas pointing at the new snapshot and others at the old. Reads\nserved by different replicas during such a window may differ until the\nnext successful\n[…]\niably. The wiring test pins the\nobservability plumbing; the partial-fail path itself is exercised\nimplicitly by the alloc/free lifecycle tests in v1.9.1.\n\nNo behaviour change for happy-path workloads.",
"is_bot": false,
"headline": "feat(replica): surface refresh divergence via counter + structured log",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:09:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76f57cfe184e643327a4e4af33c27dcfba736a34",
"body": "… from 19% to 2%\n\nRefactor replicaPool.refresh to allocate ONE C buffer per refresh tick\nand point every replica at it via SQLITE_DESERIALIZE_READONLY (no\nFREEONCLOSE — the pool owns the buffer's lifetime). The previous path\nwent through mattn.SQLiteConn.Deserialize, which sqlite3_malloc64s and\nmemc\n[…]\no-shimmed sqlite3_deserialize\npath now, just with different flag words.\n\nNo wire-format break. No API change. Race-clean across the full -race\nsuite including the 67s replication/raft integrity tests.",
"is_bot": false,
"headline": "perf(replica): shared READONLY snapshot buffer drops mixed-RW memmove…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T23:00:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc3089357e369319c42750ad2116c32eeee01f53",
"body": "…s don't get SQLITE_FULL\n\nRoot cause: DB.Restore (and replicaPool.refresh) called mattn's\nSQLiteConn.Deserialize, which invokes sqlite3_deserialize with only\nSQLITE_DESERIALIZE_FREEONCLOSE and N=M=len(buf). SQLite then permanently\nfreezes the database page capacity at the snapshot size, and any\nsubs\n[…]\niter grows between ticks (general regression, not RESIZEABLE-specific)\n\ngo vet, golangci-lint (no new findings), and the full -race suite all\npass — including the 66s replication/raft integrity tests.",
"is_bot": false,
"headline": "fix(restore): use SQLITE_DESERIALIZE_RESIZEABLE so post-restore write…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T22:28:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb37656ec53ed1c8b9aad1cb4147da6d3037ea4d",
"body": "Adds 14 new test files (~3.5k lines) raising coverage for areas that\npreviously had only smoke tests: the memdb / memdb-cli main commands\n(including the raft subprocess path), the logging package's text/JSON\n+ syslog + hclog adapters, the replication binary codec, the raft FSM\nand on-disk log/stable\n[…]\nze buffer would require pinning to a\nspecific mattn struct layout; revisit when a real workload justifies it.\n\nNo behaviour changes. go vet, go test ./..., and the 66s raft\nintegration suite all pass.",
"is_bot": false,
"headline": "test: expand coverage across CLI, raft, logging, server, codec",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-20T21:59:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "432bf5d3b82770074db2c4c42cd9054da1e8191f",
"body": "Profiling BenchmarkForwarding_PoolReuse (added in this commit) showed\ngob.(*Decoder).getDecEnginePtr / recvType / compileDec accounting for\n~45% of allocations on the forwarding hot path. Cause: writeMsg/readMsg\ncreated a fresh gob.Encoder/Decoder on every call, which forced gob to\nre-send the Forwa\n[…]\nn.\n- TestConnPool_FullPool / TestConnPool_Close updated for the new pool\n signatures (Get returns *RPCConn, Put takes *RPCConn).\n- Full make test-race green; gofmt / go vet / golangci-lint all clean.",
"is_bot": false,
"headline": "perf(raft): cache gob Encoder/Decoder per forwarding conn",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-06T03:15:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9650b8ae352a5958558621b8793df07d6d6b58d9",
"body": "The follower's ConnPool returns a connection to its idle channel after every\nsuccessful sendForward, expecting it to be reusable across requests. But\nforwarder.handleConn was single-shot: defer conn.Close() ran after one\nrequest, so every reused conn within the 30s idle window was already\nhalf-close\n[…]\niet.\n\nRegression covered by TestReplication_ForwardingPoolReuse, which issues\n20 sequential forwarded writes through one follower without a leader\nchange. Pre-fix, the second call would fail with EOF.",
"is_bot": false,
"headline": "fix(raft): loop in forwarder.handleConn so pooled conns survive reuse",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-05-06T02:29:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c32846870fc9ef61c4269cbfe2c9c5cdff1bb315",
"body": "Fresh end-to-end run (make bench + make pprof + make pprof-server +\nmake pprof-raft) on the reference hardware. v1.7.x and v1.8.0 are\nfeature releases (CLI Raft wiring, SCRAM-SHA-256 auth, Extended Query\nProtocol, memdb-cli wire mode) and do not touch the measured hot paths;\nper-release shifts are w\n[…]\no describe the actual\n v1.6.2+ wire format (8-byte prefix + 40-byte footer) instead of the\n long-since-superseded 40-byte header\n- Postgres wire table gains an Extended Query Protocol row (147k q/s)",
"is_bot": false,
"headline": "docs: refresh BENCHMARKS.md and README for v1.8.0",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T23:26:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5490bc46c4ee817f6a28e0c03f9b8f9bd3b286fe",
"body": "Two complementary additions that turn memdb-cli from a read-only\ninspection shell into a full client for both snapshot files and\nrunning servers.\n\nWire mode (-addr HOST:PORT) connects via lib/pq to a memdb server\nover the PostgreSQL wire protocol. Behaves like a small psql: full\nread+write (subject \n[…]\nry writes, and\nloadTableNames sqlite_* exclusion. 50+ subtests pass under -race.\n\nNew deps: github.com/peterh/liner (pure Go, ~1k LOC, MIT) and\ngithub.com/lib/pq (the standard PG database/sql driver).",
"is_bot": false,
"headline": "feat(cli): wire-mode client + history + tab completion",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T22:46:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "935ca33383683e42d8f4c14b3ad07dfd8b022392",
"body": "sqlite3-style REPL that opens a snapshot file (works while\n'memdb serve' is running — atomic-rename writes don't affect\nalready-open fds, so the inode the CLI opens is a stable\npoint-in-time view). Strips the MDBK envelope via the new public\nUnwrapSnapshot helper, opens the unwrapped payload with\nmo\n[…]\n per-row scan scratch in scanAll and replacing\nfmt.Fprintf(\"%-*s\") with io.WriteString against a 256-byte space\nslab in writeFixedWidthRow (-41% time, -49% memory, -50% allocs\nvs the naive first cut).",
"is_bot": false,
"headline": "feat(cli): add memdb-cli read-only snapshot inspection shell",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T22:06:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5340f3886a4ad0c4dbbe9a50d9e644380b2aa42",
"body": "The repo had an `example/` directory at the root holding the same\ncode as the top-level README's Quick Start snippet. Moving it under\nthe new `examples/` tree alongside `restapi` and `cluster` keeps\ndiscovery in one place and makes the library/library+REST/library+\nraft progression visible at a glance. git mv preserves history.",
"is_bot": false,
"headline": "docs(examples): move stray example/ to examples/quickstart",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T17:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "064706a67cca5e192bff6c83cf297c4533dd3429",
"body": "Single-process demo that brings up three replicated memdb nodes\njoined into one Raft cluster, each exposing the PostgreSQL wire\nprotocol on its own port. Writes from any node forward to the leader,\nreplicate under consensus, and become visible on every node before\nthe response returns. Self-generate\n[…]\nation pointing to the new\n example.\n\nVerified end-to-end: CREATE on follower → forwarded; INSERT/UPDATE\nvisible on every node; pgx in default binary-format mode reads\ncommitted data through any node.",
"is_bot": false,
"headline": "docs(examples): 3-node Raft cluster + PG wire example",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T17:54:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c81f1c2ff022fdc73facb4e27c1d1b88d295e99",
"body": "Server: Parse / Bind / Describe / Execute / Sync / Close / Flush, with\nserver-side prepared statements, named portals, and the\nskip-until-Sync error state. Result rows are materialised eagerly at\nDescribe('P') / Execute time so a portal never holds a *sql.Rows\nacross messages — the previous draft ke\n[…]\nthat drive the full Parse→Sync sequence, plus a pprof scenario\n(make pprof-server-extended-select via TestPProf_Server_Extended_Select)\nthat hit ~190k q/s on a 16-client parameterised SELECT workload.",
"is_bot": false,
"headline": "feat(server): Extended Query Protocol; dual-protocol restapi example",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T17:24:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ca1d01067f29db370e7fe299950a3d62215fa74",
"body": "Modern psql/pgx default to SCRAM and won't downgrade to cleartext, so\nthe previous BasicAuth-only path locked those clients out (or required\nrunning them in a less-safe configuration). Add a SASL exchange driver\nplus a ScramAuth credential type that derives StoredKey and ServerKey\nonce at constructi\n[…]\n matches the standard rather than only being self-consistent), parser\n unit tests, hand-rolled-client end-to-end SASL exchange. Verified\n with real psql 16 against `memdb serve -auth-method scram`.",
"is_bot": false,
"headline": "feat(server): SCRAM-SHA-256 auth (RFC 5802); -auth-* CLI flags",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T16:22:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "881ce6e7f408e0e9feff01b941ab4ad59dca8938",
"body": "- cmd/memdb: -raft-* flags expose replication via the bundled binary;\n buildRaftNode loads mutual-TLS PEMs, builds the adapter, sets OnExec\n via a captured pointer so memdb.Open precedes node bootstrap safely;\n -durability=none|wal|sync flag with auto-default (none in raft mode,\n wal standalone)\n[…]\n pprof-raft-memdb target captures the full integrated path\n (PG → OnExec → raft → FSM → ExecDirect) on a 3-node cluster of real\n memdb.DB instances, vs the existing pprof-raft which uses a mock FSM.",
"is_bot": false,
"headline": "feat(cli): wire raft replication into serve; add -durability flag",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T15:46:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "45aa2227c5eba89fe4d4d302faf4e678693b5610",
"body": "Replace the bytes.Buffer-based snapshot writer that buffered the entire\nserialised payload to compute SHA-256 with a streaming writer. The\nintegrity wrap moves from a 40-byte header to an 8-byte prefix\n([magic][version]) plus a 40-byte footer ([payloadLen][sha256]); the\nwriter feeds payload bytes th\n[…]\nreverted: on consumer\nNVMe the cond-variable bookkeeping costs more than the fsyncs it\nsaves (BenchmarkWAL_Append_Parallel-8 +25%). The new bench is\nretained as a regression guard for future WAL work.",
"is_bot": false,
"headline": "perf: streaming snapshot writer, -39% time / -98% B/op on large flushes",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-26T13:37:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4fdc74ba0589fb4f35fcdd345f7fa7fe0510d02d",
"body": "Reuse a per-handler cmdBuf slice when assembling CommandComplete\nframes. Replaces the per-response make([]byte, size) in\nsendCommandComplete and the make+string([]byte) in buildTag with\nin-place append into stable storage. New sendCommandCompleteCount\nformats \"PREFIX N\" tags (INSERT/UPDATE/DELETE/SE\n[…]\n (8 clients): total alloc_space\ndrops from 473 MB to 431 MB; the buildTag and sendCommandComplete\nallocation sites disappear from the profile. Throughput unchanged\nwithin run-to-run noise (~35 k q/s).",
"is_bot": false,
"headline": "perf(server): scratch buffer for CommandComplete; remove buildTag",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T23:54:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e31e7f31a0b45f343474558361017e17477a2c2a",
"body": "…Sponsors\n\nThe Profile-analysis section in BENCHMARKS.md previously quoted\nfunction-by-function percentages from the v1.5 capture, even though\nthe surrounding throughput numbers were already v1.6.1. Re-read all\nfour pprof files in coverage/pprof/ (and server/coverage/pprof/ for\nthe wire-server captu\n[…]\ncoverage/pprof/\nbecause the test resolves MEMDB_PPROF_DIR relative to the package.\n\nREADME: appended Contributors / Sponsors / License sections in the\nsame format used by voicetel/freeswitch-security.",
"is_bot": false,
"headline": "docs: refresh pprof tables with v1.6.1 numbers; add Contributors and …",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T20:12:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "185e843013e929e5b928303c8a49e2d5c96b75e1",
"body": "Re-run `make bench`, `make pprof`, `make pprof-server`, and\n`make pprof-raft` on the reference hardware (12th Gen i7-1280P,\n20 threads, Linux, Go 1.24) and update both BENCHMARKS.md and the\nREADME summary tables.\n\nHeadline shifts vs the v1.5.0 reference run already documented:\n\n- Raft Apply (3-node)\n[…]\nhe v1.6.0 test change that pinned\nReadPoolSize=GOMAXPROCS, so the Narrow SELECT and Wide SELECT\nthroughputs now reflect a tuned deployment rather than a\nsingle-connection bottleneck.\n\nNo code changes.",
"is_bot": false,
"headline": "docs: refresh benchmarks for v1.6.1",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T19:42:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84633dd56d9b8c5585d9bef8a018990121ca902a",
"body": "…er, replica pool\n\nThree smaller wins surfaced after the v1.6.0 sweep removed the dominant\nhot spots. None of these are individually large, but each removes a\nper-operation allocation from a hot path that runs once per request.\n\n- replication/raft/store.go: replace json.Marshal/Unmarshal in the\n on\n[…]\nft log entries written by\nv1.6.0 are JSON and will not decode under v1.6.1. Operators upgrading\nan in-flight cluster should snapshot first.\n\nTested\n- go test -race ./... passes.\n- make check is clean.",
"is_bot": false,
"headline": "perf: second-sweep allocation cleanups in raft log store, server read…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T18:31:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8fc6e48759f1437fc28c5371cd7ca1940f2d51f3",
"body": "… flush\n\nA second pprof sweep found six concrete wins; this commit lands all of\nthem as a single coherent change. Numbers are from /tmp/memdb-prof-after\non a 12th-gen i7-1280P (20 threads), captured by the new pprof tests\nlisted below.\n\nPerformance changes\n- Move the WAL binary v1 codec into package\n[…]\ngets a v1.6 update note with the measured deltas.\n\nTested\n- go test -race ./... passes (modulo a pre-existing flaky\n TestReplication_AllNodesConverge unrelated to this change).\n- make check is clean.",
"is_bot": false,
"headline": "perf: 2.47x raft apply, 1.38x contended writes, 25% faster compressed…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-25T18:12:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd5c60af321afb73310b90b80687c0d63fa18402",
"body": "When 'memdb serve' failed to bind the requested port (e.g. 5432 already\nin use by PostgreSQL), the error was logged exclusively to syslog and\nthe process exited 0 silently. The operator had no visible indication\nof the failure and no way to diagnose it without checking syslog — which\ncaused exactly \n[…]\n supervisors, and CI pipelines.\n\nBefore: silent exit 0, error only in syslog.\nAfter: 'memdb: server error: listen tcp 127.0.0.1:5432: bind: address\n already in use' printed to stderr, exit 1.",
"is_bot": false,
"headline": "fix(cli): print port-conflict errors to stderr and exit non-zero",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-24T12:38:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c911d39c9a99b51315b7e51459f5f81512e46f8f",
"body": "…spection\n\nClearly separates what application code needs (fully supported) from\nwhat administrator tooling needs (not supported via wire protocol).\n\n§ Server Mode — new 'Protocol compatibility' section:\n * Table of supported statements (SELECT/INSERT/UPDATE/DELETE/DDL/PRAGMA)\n * Explicit statement\n[…]\nhould use the library API directly.\n\n§ Good Fit / Bad Fit:\n * New bad-fit bullet for psql backslash commands with a pointer to\n the Protocol compatibility section and the sqlite_master workaround.",
"is_bot": false,
"headline": "docs(server): document protocol compatibility and administrator intro…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-24T12:19:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ff5bfa9198efe3bd3bcae5efb3a49e278602d3c",
"body": "Re-applies the README changes from the reverted v1.5.2 commit.\nNo code changes — documentation only.\n\nThree additions:\n1. CLI section: new 'Inspecting snapshots with sqlite3' subsection.\n Explains the 40-byte MDBK header, the 'dd if=... skip=40' workaround,\n and the psql alternative for live dat\n[…]\nth the sqlite3 CLI' sub-section with the\n exact error message and the fix.\n3. Good Fit / Bad Fit: 'direct sqlite3 CLI' added as a bad-fit bullet\n with a pointer to the snapshot inspection section.",
"is_bot": false,
"headline": "docs: restore sqlite3 snapshot inspection documentation",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-24T12:08:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b768503e72d9bd4f6b9ce74945662edd8581886a",
"body": "The SSLRequest packet layout is:\n buf[0:4] = length field (0x00000008 = 8)\n buf[4:8] = magic number (0x04D2162F = 80877103)\n\nThe code was reading buf[0:4] (the length field, always 8) and\ncomparing it to 80877103. That condition can never be true, so the\nSSLRequest handling path was silently dea\n[…]\nServer_SSLRequest_Declined and\nTestServer_SSLRequest_Declined_QueryWorks introduced in the\nv1.5.1 integration test suite. Those tests exercise the real wire\nprotocol path that psql and pgx always use.",
"is_bot": false,
"headline": "fix(server): correct SSLRequest magic byte offset in handleStartup",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-23T22:46:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b04b8384f9e72bc6c3ee0ce7f7b7bf5f6df1ff4f",
"body": "…urrency, Stop\n\nThe server package had zero TLS test coverage despite TLS being a\nfirst-class config option (Config.TLSConfig). A self-signed cert in the\nright Config was all it took for the TLS path to go completely untested:\ntls.Listen, the TLS handshake inside ListenAndServe, and the full\nquery r\n[…]\n on free port, waits for Accept\n doStartup — no-auth startup handshake\n doStartupWithSSL — SSLRequest + startup handshake\n readMsg / sendSimpleQuery / drainToReady — wire-level helpers",
"is_bot": false,
"headline": "test(server): comprehensive integration suite — TLS, SSLRequest, conc…",
"author_name": "Michael Mavroudis",
"author_login": "voicetel",
"committed_at": "2026-04-23T21:21:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bfdac8b34c219e8629aed404982e6c4dd52d2639",
"body": "…0 docs\n\nWAL.Append: pre-reserve 4-byte length prefix in the pool buffer before\nwalEncodeBinary, eliminating the make+copy per write. Result: 642 → 476\nns/op, 128 → 0 B/op, 1 → 0 allocs/op (~26% faster on the WAL hot path).\n\nServer write buffer: bufio.NewWriterSize 4 KB → 32 KB. Eliminates ~6\nimplic\n[…]\nncurrent read: ~26% faster than file SQLite at 4 goroutines (was ~22%)\n - WAL-durability INSERT: 1.63× faster than file/sync=off (was 1.58×)\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: WAL zero-alloc append + 32 KB server write buffer; update v1.5.…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T19:42:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3595eff6d522da293b0b949bb48db89837cffc1f",
"body": "- Features list: add Panic-safe callbacks bullet\n- Config block: document DisableForeignKeys field\n- Server Mode: note Config.Logger and BasicAuth constant-time comparison\n- WAL format section: add Snapshot integrity subsection documenting the\n 40-byte MDBK header, SHA-256 verification on load, legacy-file compat,\n and ErrSnapshotCorrupt sentinel",
"is_bot": false,
"headline": "docs: document Sprint 1 security changes in README",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T15:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a890fcd540c78badfa32161641501761101e008",
"body": "…, snapshot checksums\n\n1.1 — Constant-time authentication (server/server.go)\n BasicAuth.Authenticate now uses crypto/subtle.ConstantTimeCompare for\n both username and password comparisons. Go's native == short-circuits\n at the first differing byte; over a real network this leaks credential\n leng\n[…]\nthan an in-process buffer.\n\n Tests: checksum round-trip, payload corruption detected, header\n corruption detected, legacy files load cleanly, ErrSnapshotCorrupt\n is a proper sentinel for errors.Is.",
"is_bot": false,
"headline": "security: Sprint 1 — timing-safe auth, FK enforcement, panic recovery…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T15:45:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5215df17f142527ecc63dee6a0505859d39bc42",
"body": "grep audit found the same five 'make pprof-*' target lines appearing\nverbatim in two separate sections:\n\n 1. § Profiling (pprof) → Capture targets (L863-867)\n 2. § CLI → Makefile reference (L935-939)\n\nThe authoritative list lives with the Profiling section — that's where\nan operator \n[…]\nppears twice,\n once standalone and once composed with EncryptedBackend) are\n legitimate distinct examples.\n\nNo content deleted — every pprof target remains fully documented in\nexactly one place.",
"is_bot": false,
"headline": "docs: de-duplicate pprof target list in README",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:58:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8eb7fa62f9dec7ed7bb69ff280cb699fbb9dba6c",
"body": "The purego build path was a second SQLite driver (modernc.org/sqlite)\nmaintained in parallel with the primary mattn/go-sqlite3 (cgo) path via\n'go:build purego / !purego' split files. It was never the primary build\ntarget and has documented second-class semantics (no backup API, no\nupdate hooks, no R\n[…]\n tests continue to pass because the primary (cgo) path was\nalready the only path that was actually exercised by the test suite —\nno _purego files had tests of their own, they were pure fallback\nstubs.",
"is_bot": false,
"headline": "refactor: drop purego build tag and modernc.org/sqlite support",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:51:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe57ae8481e37ae111dd50f31a89e9ad0c7faf0e",
"body": "Found several inconsistencies between README.md and the just-regenerated\nBENCHMARKS.md / coverage/bench.txt. Fixing:\n\nStale headline claims\n * Header blurb and Features bullet claimed '2.26× faster writes than\n file SQLite'. Current data shows 8237/4376 = 1.88× on INSERT; fixed.\n * Features bul\n[…]\ny benchmark number in the README now cross-checks against the\nmatching entry in coverage/bench.txt / BENCHMARKS.md — verified by\nrunning 'grep -E \"\\d+×|ns/op\"' through the file and auditing every\nhit.",
"is_bot": false,
"headline": "docs: sync README and godoc benchmark numbers to v1.4.0 reference run",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:38:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15411f97440e5dd73eda910a58f2298d3fa68100",
"body": "The Concurrent-read (parallelism=4) table appended the word 'slower' to\nthe single-conn row (2.71× slower) but left the file-SQLite rows as\nbare '1.22×' — which read like a contradiction with the prose that\ncalled memdb/pool '2.71× faster than memdb without the pool'.\n\nFix by following the same conv\n[…]\no added a short header note explaining the baseline choice, because\nthis is the only comparison table where the baseline is not a plain\n'memdb' row — memdb/pool wins outright and takes the 1.00× slot.",
"is_bot": false,
"headline": "docs(bench): fix contradictory ratio convention in Concurrent-read table",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:30:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a1574eba1a781bc8a112bf256e68c2554c6a3d71",
"body": "Makes the tuning package discoverable from the natural starting point:\n\n * Config.ReadPoolSize godoc now cites the 2.71× concurrent-read\n win from BENCHMARKS.md and shows the canonical tuning.Recommend\n call that produces drop-in Config fields.\n * README gets a new 'Tuning' section with the \n[…]\nare purely discoverability edits. The\nTestRecommend_Calibration_* tests already guard against the model\ndrifting relative to the benchmark, so this documentation will stay\naccurate across future runs.",
"is_bot": false,
"headline": "docs: point Config.ReadPoolSize godoc and README at tuning.Recommend",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cad6edc51e4a72b15860f689539299f436c31bf3",
"body": "…reshInterval\n\nAdds a new memdb/tuning package that turns the v1.4 benchmark findings\ninto a reusable mathematical model. Callers pass in their workload\ncharacteristics (DB size, memory budget, staleness tolerance, read/write\nmix) and get back a Recommendation struct whose fields drop straight\ninto \n[…]\ne_ doc-tests (ExampleRecommend, tightMemory, writeHeavy,\nnoPoolFallback, stalenessBand) verifying the golden output of realistic\nscenarios so the package godoc on pkg.go.dev is also a working example.",
"is_bot": false,
"headline": "feat(tuning): closed-form recommender for ReadPoolSize and ReplicaRef…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T14:17:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abd080be03e47e0ffb997b8de2d8ffe7def16c5d",
"body": "Captures a complete run of the benchmark suite on reference hardware\n(20-thread i7-1280P, Go 1.24, mattn/go-sqlite3) and summarises:\n\n * Headline throughput for 11 core-DB and 5 server scenarios.\n * All microbenchmarks (single-row, transaction, WAL, flush,\n lifecycle, concurrent-mixed) with ns/\n[…]\numbers; the summary table inline remains as a quick\n reference.\n * BenchmarkOpen / BenchmarkOpenRestore now use discardLogger() so\n benchmark output is no longer polluted with INFO flush lines.",
"is_bot": false,
"headline": "bench: consolidate v1.4.0 results into BENCHMARKS.md with pprof analysis",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:58:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f44cafd0980ae7751b0bd6cf6f5cf853b810f93",
"body": "pprof-server runs all five server pprof scenarios into\n./coverage/pprof. Individual targets for each:\n\n pprof-server-select narrow SELECT, 16 clients\n pprof-server-select-wide 500-row SELECT, 8 clients — the profile\n that surfaced the 57% allocation finding\n pprof-server-insert concurrent INSERT DML\n pprof-server-mixed mixed workload with mutex+block sampling\n pprof-server-connect connect/query/disconnect cycles",
"is_bot": false,
"headline": "build: add Makefile targets for server pprof capture scenarios",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:38:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be0884bab012af8cc5bd10f24f002f164f065a38",
"body": "Finding from pprof (wide-SELECT alloc_space profile, 500 rows/query,\n8 concurrent clients): three per-row allocations dominated server-side\nallocation rate:\n\n row := make([][]byte, len(cols)) — 261 MB / 21%\n appendCell(nil, v) per cell — 171 MB / 14%\n buf := make([]byte, size) in\n s\n[…]\nMLs\n TestPProf_Server_Mixed mutex+block sampling, 1-in-4 writes\n TestPProf_Server_Connect connect/query/disconnect cycles\nAll MEMDB_PPROF=1-gated so default `go test` skips them.",
"is_bot": false,
"headline": "perf(server): reuse row/cell/wire buffers across rows in handleSelect",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:37:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfc968388e46344fde347e88c25f2aa1996898c0",
"body": "Finding from pprof (block profile of read-only workload): the refresh\nloop allocated a new goroutine + channel + context on every tick to\nwire up shutdown cancellation for refresh, even when refresh itself\nshort-circuited as a no-op thanks to the write-generation check.\n\nAt the 50ms default that is \n[…]\ns/s, refresh below 0.5% sampling threshold (+16%)\n\nThis is on TOP of the previous write-gen short-circuit win (519k→727k).\nCumulative read-throughput improvement across the sprint: 519k → 845k\n(+63%).",
"is_bot": false,
"headline": "perf(replica): fast-path refresh tick to skip per-tick goroutine/channel",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:37:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "adadb29a8621f6bd741bb114c193b0ce79f07794",
"body": "…umbers\n\n- New 'WAL on-disk format' section documents the binary v1 wire layout,\n the legacy-gob fallback, the set of supported arg types, and the\n ErrWALUnsupportedArgType escape hatch.\n- Benchmarks section updated:\n WAL append: ~1.3 µs / 11 allocs → ~540 ns / 1 alloc\n WAL writes: 135k/\n[…]\ns pay zero per-tick CPU regardless\n of how short the interval is set (measured 519k→727k reads/s). The\n empirical sweep is clarified as the writer-active case where the\n short-circuit cannot apply.",
"is_bot": false,
"headline": "docs: binary WAL format, write-gen short-circuit, updated benchmark n…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:25:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68db98429d8d3f4126902e2239da54b9df9caa89",
"body": "The integrity suite was ~1/8 flaky under 'go test -race ./...' when the\nfull replication/raft package test binary ran in parallel. Root cause:\n\n 1. waitForLeader returned as soon as ANY node entered the leader\n state, even if followers had not yet received the first\n heartbeat and still rep\n[…]\nfirst-leader. Budget\n raised 10s → 20s to accommodate the larger timeouts. On timeout\n returns a diagnostic snapshot of every node's state so a CI\n failure is triagable from the log alone.",
"is_bot": false,
"headline": "test(raft): harden cluster convergence under -race + parallel load",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:23:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ef2387e77e65be46c70addc4e6d51f80b329624",
"body": "Finding from pprof (DurabilityWAL profile): encoding/gob reflection\naccounted for ~25% of total CPU inside WAL.Append (780 ms / 3.17 s).\nThe entry shape is fixed (Seq, Timestamp, SQL, Args []any where each\narg is one of a small finite set of scalar types), so replacing the\nreflection-based encoder w\n[…]\n\n RoundTrip_AllArgTypes, EmptyArgs, NilArg, LargeString,\n LargePayload_Rejected, UnsupportedArgType, BackwardsCompat_Gob,\n TruncatedTail_StopsCleanly, CorruptVersion, MixedFormat,\n NextSeqUpdated.",
"is_bot": false,
"headline": "perf: replace gob with binary WAL wire format (5× faster Append)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:23:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d3b6c32f495ef1c59515f8e131d78aaa8896f87",
"body": "Finding from pprof (reviewed in prior sprint): the replica refresh loop\ndeserialises the entire writer state into every replica on every tick,\nregardless of whether any write has actually occurred. For read-heavy\nworkloads this is pure waste — the pages being copied are identical\nto what the replica\n[…]\nU. Would introduce a stale-method-value double-release\n risk if a caller ever accidentally invokes the release func\n twice. Keeping the current allocation is worth the correctness\n guarantee.",
"is_bot": false,
"headline": "perf: skip replica refresh when writer idle (40% read-throughput win)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T13:23:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25bcf30fd321e5549a9a16445e7e9eca42cd17e7",
"body": "Motivation (from reviewing pprof output of TestPProf_MixedReadWrite):\n\n Under a mixed RW workload with ReplicaRefreshInterval=2ms and a 500-row\n dataset, pprof attributed ~43% of total CPU to replicaRefreshLoop —\n driven by sqlite3_deserialize memmoves into every replica on every\n tick. The publ\n[…]\nof\n capture using the package default, so the before/after profiles\n can be diffed directly. The common workload body is factored into\n runMixedPProf so both variants are strictly comparable.",
"is_bot": false,
"headline": "perf: raise ReplicaRefreshInterval default 1ms → 50ms (2.7× throughput)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:42:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4da8b62f37ac8ed962f3ed39b1137af4550bbd94",
"body": "README:\n- Durability Modes table updated — DurabilitySync now accurately\n described as WAL append + full backend flush per write, zero loss\n window.\n- Context-aware methods (ExecContext/QueryContext/QueryRowContext)\n documented.\n- New 'Replication Testing' section lists every test in the new\n in\n[…]\npprof: run benchmarks with CPU/mem/mutex/block profiling\n enabled via go test's native -cpuprofile / -memprofile / -mutex /\n -block flags.\n- pprof-view PROF=<path>: open a profile in pprof's web UI.",
"is_bot": false,
"headline": "docs: README + Makefile for pprof, replication integrity, DurabilitySync",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:31:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "873901858d583d895523be6fa796575fe34364e8",
"body": "New file replication_integrity_test.go brings up a real 3-node Raft\ncluster on loopback ports for every test. Each test asserts byte-level\nequality of every node's FSM log across the cluster — the same\nproperty Raft guarantees on paper — so any corruption, duplication,\nor reordering surfaces immedia\n[…]\non / snapshotLogs / leader / follower accessors, and\nassertLogsIdentical that surfaces the first divergent entry with\nexact offsets so debugging a regression does not require manual\ncross-referencing.",
"is_bot": false,
"headline": "replication/raft: add end-to-end integrity suite (11 tests)",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:31:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4a38c119a0022ceb27258d40e43b5fba006c743",
"body": "New package memdb/profiling wraps net/http/pprof with:\n\n- StartServer / Config: runs pprof on a loopback address by default,\n optional MutexProfileFraction and BlockProfileRate to enable the\n corresponding runtime samplers.\n- CaptureCPUProfile / CaptureHeapProfile / CaptureNamedProfile: write\n pr\n[…]\n) gated\n behind MEMDB_PPROF=1. Observed 254k writes/s in a 3s run.\n\ngo.mod: promote hashicorp/go-hclog from indirect to direct (already\nimported by logging package and replication/raft/raft_test.go).",
"is_bot": false,
"headline": "profiling: add pprof package with HTTP server and capture helpers",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:31:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a63f38a29e088cd6926067291ea08eadc5079bd",
"body": "- DurabilitySync now actually forces a full backend flush after every\n successful Exec (previously defined but unimplemented — writes with\n DurabilitySync behaved identically to DurabilityNone). The WAL is\n still appended first so a crash between the WAL append and the\n backend flush is recovera\n[…]\nestart.\n- replica_purego.go: add checkout stub so the purego build compiles.\n The stub is unreachable (newReplicaPool returns an error in purego\n builds) but satisfies the shared memdb.go code path.",
"is_bot": false,
"headline": "core: implement DurabilitySync, add *Context APIs, pool WAL encoder",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T12:30:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8fbce507c289800b8836cfffc283353cd29b0f2b",
"body": "wal.go (critical correctness):\n Rewrote with self-contained per-record framing — each record is a\n [4-byte big-endian length][independent gob message]. Previously, a fresh\n gob.Encoder was created on every OpenWAL, each of which emitted its own\n type descriptor; multiple processes appending to t\n[…]\nte test output.\n - Updated TestWAL_Replay_CorruptEntry to match the new tolerant replay\n behaviour (truncate at corrupt tail, do not error — preserves any\n valid records before the corruption).",
"is_bot": false,
"headline": "fix: comprehensive review round 2 — 35+ correctness and perf fixes",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T03:14:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5cd9f2502519f3ca2c0d52c9f23c448cd97c4bcf",
"body": "Benchmarks / performance:\n - Performance headline added to opening paragraph\n - Features: added 2.26× write speed and concurrent read pool bullets\n - Single-goroutine table: all numbers updated from current run\n - Concurrent reads: updated numbers, pool now described as channel-based\n exclusi\n[…]\nated file descriptions to reflect current state\n (ExecDirect, WrapBackend, Serialize/Restore, channel pool, driver_shared.go,\n memdb_extra_test.go, SSL negotiation, WaitGroup tracking, ConnPool)",
"is_bot": false,
"headline": "docs: full README update for current codebase state",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T01:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "307574e8b0dad16c532238a46d806142f319175c",
"body": "README.md:\n - Go version corrected to 1.24\n - Single-goroutine table updated: INSERT 3,627 ns (was 4,178) giving\n 2.26× advantage over file/off (was 1.81×); all other operations\n updated with current measurements\n - WAL overhead updated: ~1.6 µs per write (was ~1.3 µs), still 1.57×\n fast\n[…]\n× (was 1.5-1.8×)\n\nmemdb_bench_test.go / memdb_compare_test.go:\n - discardLogger() helper sets a discard slog handler for benchmarks\n so flush/restore INFO events no longer pollute benchmark output",
"is_bot": false,
"headline": "docs: update benchmark results; silence slog output in bench helpers",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T00:56:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e11b5ad57aa05d6e65469f6050cfca75644ba3e9",
"body": "…serialize\n\nPrevious design: RWMutex + round-robin atomic counter.\n\n Problem 1 — The RLock in next() was released before the caller used\n the *sql.DB. refresh() calling sqlite3_deserialize on a replica while\n an open *sql.Rows cursor existed on it was undefined behaviour in SQLite.\n The RLock di\n[…]\ned.\n\n Partial Deserialize failure: remaining replicas (including the failed\n one) are returned to the channel before the error is surfaced so the\n pool stays usable with a mix of old and new state.",
"is_bot": false,
"headline": "feat(replica): channel-based pool eliminates open-cursor race with De…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T00:29:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1f52b4e8e00f63458bba4da91c265f4bb9dbde0",
"body": "memdb.go:\n - Close() now sets closed=true immediately after wg.Wait(), before Flush,\n eliminating the race window where goroutines could write to a closing DB\n - Extracted flushUnchecked() so Close() can flush after marking closed\n - QueryRow: added closed check (routes to d.mem which returns \n[…]\nched attrs appear before call-site attrs\n\ncmd/memdb/main.go:\n - ListenAndServe error logged as slog.Error not slog.Info\n - signal.Stop(quit) deferred to prevent goroutine leak after runServe returns",
"is_bot": false,
"headline": "fix: full code review — 41 issues resolved across all packages",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-23T00:06:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6518f718a3ecb8f609c4a10d7312a16afe70beec",
"body": "…og adapter\n\ncontext.TODO() signals 'I have not decided what context to use yet'.\ncontext.Background() is correct here — the hclog.Logger interface has no\ncontext parameter on its methods, so these calls originate from hashicorp/raft\ninternal goroutines with no request context. Background() correctly expresses\n'long-lived, no cancellation' which is the semantics of a logger.",
"is_bot": false,
"headline": "fix(logging): replace context.TODO() with context.Background() in hcl…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:39:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac347de872ee2e67843e19b8049bcba989c4a289",
"body": "…ndlers\n\nlogging/ package (new, no new dependencies):\n logging.go — NewTextHandler, NewJSONHandler (stdlib slog wrappers)\n syslog.go — NewSyslogHandler: custom slog.Handler that routes each\n record to the matching syslog priority (LOG_DEBUG /\n LOG_I\n[…]\nup, falling back to text on stderr\n\nREADME.md:\n New Logging section: handlers, level table, wiring examples, hclog bridge\n Features bullet updated\n Project Structure updated with logging/ directory",
"is_bot": false,
"headline": "feat(logging): structured slog logging with syslog, JSON, and text ha…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:36:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa5106b0ae1b557d95e77d740859fea0c07527c3",
"body": "…ding\n\nrpc.go:\n Add connPool — a channel-based pool of idle TLS connections to the\n current leader's ForwardAddr. The buffered channel IS the pool:\n\n Get() — non-blocking receive; returns warm conn or dials fresh\n Put() — non-blocking send; closes conn if channel full\n Close()— drains c\n[…]\nQL (INSERT OR REPLACE /\n ON CONFLICT DO NOTHING) for safe retries — the standard Raft\n recommendation used by etcd, CockroachDB, rqlite, and Consul.\n Update rpc.go description in Project Structure.",
"is_bot": false,
"headline": "feat(replication): channel-based TLS connection pool for write forwar…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:25:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "660da41d26adfc3e878cdaa4f803f46c4aedb244",
"body": "README.md:\n Features: update replication bullet to describe Raft + TLS forwarding\n Configuration: add OnExec field with full explanation of the local-write\n bypass and FSM loop prevention\n Replication section: complete rewrite\n - Remove Leader/Follower section (deleted)\n - Document clust\n[…]\n for follower.LeaderAddr() to be\n non-empty before calling follower.Exec, preventing a race where the\n election is won but the leader address has not yet propagated to\n follower nodes via heartbeat",
"is_bot": false,
"headline": "docs(replication): rewrite documentation for Raft-only replication",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:07:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7287344485abce5572be458a3a0e102158734cb",
"body": "…orwarding\n\nQuorum enforcement:\n NewNode now rejects even peer counts with a clear error explaining that\n even-sized clusters have no fault tolerance advantage (e.g. 2-of-2 quorum\n fails on any single node loss, same as 1-of-1). Valid sizes: 1, 3, 5, 7.\n Single-node clusters log a warning. Minim\n[…]\ns: updated from 2 to 3 peers\n - TestNode_Exec_NotLeader: updated from 2 to 3 peers\n - TestNode_AddRemoveVoter_NotLeader: updated from 2 to 3 peers\n - TestParsePeers_Valid: updated from 2 to 3 peers",
"is_bot": false,
"headline": "fix(replication): quorum validation, crash-safe stores, transparent f…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T23:00:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c9d69957b296905ed7f77d02d7a89661dbb81330",
"body": "Remove:\n replication/leader.go, follower.go, transport.go and their tests.\n The Transport interface was never implemented for real network use;\n the leader/follower model provided no automatic failover.\n\nAdd:\n replication/replication.go\n WALEntry type isolated here so replication/raft can imp\n[…]\n can route writes\n through node.Exec for cluster consensus.\n\nmemdb.go:\n Wire OnExec into DB.Exec — invoked after WAL append, before return.\n Non-nil error from OnExec propagates back to the caller.",
"is_bot": false,
"headline": "feat(replication): replace leader/follower with full Raft over TLS",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T22:40:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "77b517b1fe3dd0f9f646ac5df1f27253245d250f",
"body": "…ference\n\n- Installation: split into library (go get) and CLI (make build/install)\n sections; add Makefile quick-reference for build-purego and build-all\n- CLI: replace non-existent commands (wal inspect/replay, --config flag)\n with the three real sub-commands (serve, snapshot, restore) and their\n\n[…]\nion from 1.18 to 1.24 (required\n by the current dependency graph after go mod tidy)\n- Project Structure: add Makefile entry\n- purego note: clarify that flush/restore are unavailable (not just slower)",
"is_bot": false,
"headline": "docs: update README with Makefile build workflow and corrected CLI re…",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:57:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3224e85e708b1e613072091835083338c6ecd95c",
"body": null,
"is_bot": false,
"headline": "chore: add /build/ and /coverage/ to .gitignore",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:56:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "097fc790d740bb41d19a899f07194e41c67f828e",
"body": "Targets:\n Build: build, build-purego, build-prod, build-all (linux/darwin × amd64/arm64)\n Run: run, run-args\n Core tests: test, test-race, test-short, test-coverage, test-coverage-check,\n test-specific, test-count\n Pkg tests: test-core, test-backends, test-server, \n[…]\nean, clean-tests, clean-all\n Help: help (default target)\n\nUses SHELL := /bin/bash for echo -e colour support on dash systems.\nVersion/commit/build-time injected via -ldflags from git describe.",
"is_bot": false,
"headline": "build: add Makefile",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:54:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbf428cdaac033302cab4855c0dbf8563eeacff5",
"body": "backends/backends_test.go (17 tests):\n- LocalBackend: Exists, Write/Read round-trip, atomic rename, reader\n error cleanup, file-not-found\n- CompressedBackend: round-trip, Exists delegation, corrupt stream\n rejection, inner write error propagation\n- EncryptedBackend: round-trip, nonce randomness pe\n[…]\nE, error response\n- Multiple rows (3xDataRow), empty result set\n- Terminate message closes connection\n- Unix domain socket listener\n\nTotal: 107 tests passing, -race clean, go vet + golangci-lint clean",
"is_bot": false,
"headline": "test: comprehensive test suite across all packages",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:48:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "073eb8a22e9362d36e434fd8e17667f86b4fecdd",
"body": "follower.go:\n- Remove dead AllowStaleReads field (had no implementation)\n- Fix gap detection off-by-one: fresh follower with Seq != 1 now\n triggers resync instead of silently accepting a mid-stream entry\n- Fix gap entry dropped after resync: entry is re-applied when\n entry.Seq > snapshotSeq, skipp\n[…]\n/Persist/Restore round-trip,\n serialize error, restore read error, package-level Apply (not leader,\n leader success, string args, context cancelled), Release no-op\n- All 26 new tests pass with -race",
"is_bot": false,
"headline": "fix(replication): correct bugs and add full test coverage",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T17:31:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c63e91ab0bb7a257802f8d16f39caa0cadc225b",
"body": "- In-memory SQLite DB with periodic snapshot persistence via SQLite Online Backup API\n- Three durability modes: DurabilityNone, DurabilityWAL, DurabilitySync\n- Pluggable backend interface (LocalBackend, CompressedBackend, EncryptedBackend)\n- WrapBackend adapter bridges ExternalBackend to internal me\n[…]\nvia hashicorp/raft\n- cgo (mattn/go-sqlite3) and purego (modernc.org/sqlite) build tag support\n- Comprehensive benchmark suite including memdb vs file SQLite comparison\n- go vet and golangci-lint clean",
"is_bot": false,
"headline": "feat: initial release",
"author_name": "Michael",
"author_login": "voicetel",
"committed_at": "2026-04-22T16:40:16Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 18,
"commits_last_year": 80,
"latest_release_at": "2026-07-17T14:42:43Z",
"latest_release_tag": "v1.10.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 8,
"days_since_latest_release": 4,
"mean_days_between_releases": 9.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/voicetel/memdb",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/voicetel/memdb",
"is_deprecated": false,
"latest_version": "v1.10.0",
"repository_url": "https://github.com/voicetel/memdb",
"versions_count": 24,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T14:21:23Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_stars": 3
},
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 40454,
"source_files_sampled": 94,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.19.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 60
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 16,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/hashicorp/go-hclog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.3"
},
{
"name": "github.com/hashicorp/raft",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.3"
},
{
"name": "github.com/klauspost/compress",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.0"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.3"
},
{
"name": "github.com/mattn/go-sqlite3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.48"
},
{
"name": "github.com/peterh/liner",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/hashicorp/go-hclog",
"direct": true,
"version": "v1.6.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/raft",
"direct": true,
"version": "v1.7.3",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": true,
"version": "v1.19.0",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": true,
"version": "v1.12.3",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-sqlite3",
"direct": true,
"version": "v1.14.48",
"ecosystem": "go"
},
{
"name": "github.com/peterh/liner",
"direct": true,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/armon/go-metrics",
"direct": false,
"version": "v0.4.1",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.13.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-immutable-radix",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-metrics",
"direct": false,
"version": "v0.5.4",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-msgpack/v2",
"direct": false,
"version": "v2.1.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.12",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.3",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.19.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 16,
"direct_count": 6,
"indirect_count": 10
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 7,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "voicetel",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/8617362?v=4"
},
{
"type": "User",
"login": "mavroudis",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1646475?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.973
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql.yml",
"dependency-submission.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/23 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "073ef17387d089296e13ef17fa82b6ded3fdf9a1",
"ran_at": "2026-07-22T02:46:11Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T11:10:09Z",
"oldest_open_prs": [
{
"number": 8,
"created_at": "2026-07-20T11:10:08Z",
"last_comment_at": "2026-07-20T11:10:08Z",
"last_comment_author": "dependabot"
},
{
"number": 9,
"created_at": "2026-07-20T11:10:14Z",
"last_comment_at": "2026-07-20T11:10:15Z",
"last_comment_author": "dependabot"
}
],
"last_merged_pr_at": "2026-07-14T21:25:40Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/voicetel/memdb",
"host": "github.com",
"name": "memdb",
"owner": "voicetel"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"security": 61,
"vitality": 75,
"community": 23,
"governance": 54,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 80,
"human_commit_share": 0.912,
"days_since_last_push": 1,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "80 commits in the last year",
"points": 17.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 80
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 18,
"latest_release_tag": "v1.10.0",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 9.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 23,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 0,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.973
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 97% of commits",
"points": 0.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 97
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 7,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "7/7 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 7,
"decided": 7
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "voicetel",
"public_repos": 42,
"account_age_days": 4341
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of voicetel",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "voicetel"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "42 public repos, account ~11 yr old",
"points": 23.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 42
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/voicetel/memdb"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "24 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 24
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 61,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 16 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 16
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 16,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 16,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 62,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "73 of 73 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 73,
"sampled": 73
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.013,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.087
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 80 commits agent-authored or agent-credited",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 80
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "7 of the last 80 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 7,
"sampled": 80
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 40454,
"source_files_sampled": 94,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/94 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 94,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T02:46:18.951853Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/voicetel/memdb.svg",
"full_name": "voicetel/memdb",
"license_state": "custom",
"license_spdx": null
}