公开记录存在风险
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 19:33 UTC
xiph / theora
Reference implementation of the Theora video compression format. Mirror of https://gitlab.xiph.org/xiph/theora
xiph/theora 的健康指数为 100 分中的 49 分，处于「存在风险」区间。 其得分最高的类别是Engineering Quality（72/100），最低的是Vitality（36/100）。 最近一次更新在 73 天前。 近期的大部分工作由 1 位贡献者完成。
49
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
49
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
36
开发活跃度
39存在风险
评分方式
| 18/36 | 推送新近度 — 最近一次推送于 73 天前 |
| 3.5/36 | 提交节奏 — 52 周中有 5 周有提交 |
| 10.6/18 | 提交量 — 最近一年 14 次提交 |
| 7/10 | OpenSSF Scorecard：Maintained — 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 |
所用输入
| commits_last_year | 14 |
| human_commit_share | 1 |
| days_since_last_push | 73 |
| active_weeks_last_year | 5 |
发布纪律
32存在风险
评分方式
| 16.2/27 | 有发布版本 — 3 个版本标签（无 GitHub 发布版本） |
| 7.2/36 | 发布时效 — 最近一次发布版本于 481 天前 |
| 5.4/27 | 发布节奏 — 约每 2,832.2 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 3 |
| latest_release_tag | v1.2.0 |
| releases_from_tags | 是 |
| days_since_latest_release | 481 |
| mean_days_between_releases | 2,832.2 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
51
流行度与采用
57中等
评分方式
| 34/60 | 星标 — 125 个星标 |
| 15.8/25 | 复刻 — 79 个复刻 |
| 7/15 | 关注者 — 19 位关注者 |
所用输入
| forks | 79 |
| stars | 125 |
| watchers | 19 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
44存在风险
评分方式
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件，但不是可识别的许可证 |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
45
维护者韧性（巴士系数）
41存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 8.4/22.5 | 提交分布 — 头号贡献者编写了 63% 的提交 |
| 13.5/13.5 | 贡献者广度 — 14 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 14 |
| top_contributor_share | 0.626 |
议题与 PR 响应能力
21危急
评分方式
| 21.3/46.8 | 议题解决 — 46% 的议题已关闭 |
| 0/38.3 | PR 接受 — 已裁定的 PR 中 0/12 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 0 |
| open_issues | 6 |
| closed_issues | 5 |
| issue_closed_ratio | 0.455 |
| closed_unmerged_prs | 12 |
所有权与托管责任
74良好
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 20.1/25 | 所有者影响力 — xiph 有 631 位关注者 |
| 23.4/25 | 既往记录 — 36 个公开仓库，账户约 11 年 |
所用输入
| followers | 631 |
| owner_type | Organization |
| is_verified | — |
| owner_login | xiph |
| public_repos | 36 |
| account_age_days | 4,370 |
工程质量
基础的工程与文档实践是否到位？
72
工程实践
60中等
评分方式
| 24/24 | CI 工作流 — 1 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard：CI-Tests — 无数据 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。
文档
90优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://theora.org/ |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 6 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | video, codec, compression, theora, ogg, libtheora |
| has_wiki | 否 |
| homepage | https://theora.org/ |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
39
安全态势
39存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 无数据 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 5.2/7.5 | Maintained — 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.9 |
已排除计分（无数据或不适用）：ci_tests, packaging, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
51
AI 代理上下文与指引
32存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 32.5/40 | 可读的提交历史 — 100 次人类提交中有 61 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.61 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — win32/xmingw32/Makefile |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — C（静态类型） |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | win32/xmingw32/Makefile |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
98优秀
评分方式
| 45/45 | 可类型检查的代码 — C（静态类型） |
| 53.2/55 | 可控的文件大小 — 采样的 124 个源文件中有 4 个超过 60KB |
所用输入
| primary_language | C |
| largest_source_bytes | 107,042 |
| source_files_sampled | 124 |
| oversized_source_files | 4 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
125GitHub 星标
14贡献者
14最近 12 个月提交数
73距最近推送天数
3发布版本数
1巴士系数（bus factor）
6开放议题
—软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
更多细节
Star 与 Fork 历史 0 ★ / 79 ⇿
0Star
79Fork
1发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 1修订 0
每个点涵盖 11 天。
OpenSSF Scorecard 3.9 / 10
3.9综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 不适用 | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 3 contributing companies or organizations -- score normalized to 10 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 7 | Maintained | 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
全部依赖 0
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 0 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies to assess
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"video",
"codec",
"compression",
"theora",
"ogg",
"libtheora"
],
"is_fork": false,
"size_kb": 20007,
"has_wiki": false,
"homepage": "https://theora.org/",
"languages": {
"C": 1466413,
"M4": 40158,
"Awk": 688,
"C++": 10224,
"Perl": 8225,
"Shell": 382,
"Python": 7220,
"Assembly": 122845,
"Makefile": 24999,
"Batchfile": 1028
},
"pushed_at": "2026-05-11T03:47:15Z",
"created_at": "2015-04-14T20:48:50Z",
"owner_type": "Organization",
"updated_at": "2026-07-08T03:35:51Z",
"description": "Reference implementation of the Theora video compression format. Mirror of https://gitlab.xiph.org/xiph/theora",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "https://xiph.org/",
"name": "Xiph.Org Foundation",
"type": "Organization",
"login": "xiph",
"company": null,
"location": null,
"followers": 631,
"avatar_url": "https://avatars.githubusercontent.com/u/8365509?v=4",
"created_at": "2014-08-05T17:12:54Z",
"is_verified": null,
"public_repos": 36,
"account_age_days": 4370
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2025-03-29T06:01:11Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2009-10-01T18:00:57Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2009-09-24T19:18:41Z"
}
],
"recent_commits": [
{
"oid": "28fd5ec77f0ad0e07a371cef1047828116f6bd8a",
"body": null,
"is_bot": false,
"headline": "Fix -Wshift-op-parentheses on examples",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-11T02:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faaadd9fa4a176ce31118a7b8acb3dcca5dd10b8",
"body": "ARM is not supported (for now) elsewhere than on Linux and RiscOS.",
"is_bot": false,
"headline": "Fix ARM build on Windows and iOS",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-11T02:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "224e3acb6675e363d6b4ee904f2310937fc4cc93",
"body": null,
"is_bot": false,
"headline": "Fix mingw host in CI and enable shared build",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-10T12:04:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fe242e7d7135ab49ef877b2d852dddf5c2c66fe",
"body": "With a DOS EOL, libtool fails to recognize a DEF file, adds an EXPORT\ndirective with UNIX EOL which makes a broken resulting file.\n\nThe theora.def file is not modified as its LIBRARY directive is properly\nparsed by libtool and is also used by MSVC.",
"is_bot": false,
"headline": "Fix EOL of mingw32 DEF files",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-10T12:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4810d752fb97610bab37aa432ef9bec9272fe800",
"body": null,
"is_bot": false,
"headline": "Fix exports file path",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-10T12:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ae2669a3d53fd0a564657d1253debdf77e2a241",
"body": "2.69 is much more widely available than 2.71 and works fine.",
"is_bot": false,
"headline": "autotools: relax autoconf requirement",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2026-05-01T13:40:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb822d13e5a65d3935e4c94306d2ad9ad4e483e8",
"body": "It's either not enabled and triggers an illegal instruction error or, if\nan addon is used, it's enabled but the XMM registers are not preserved\nacross context switches.\nSome later versions of NT4 are supposed to support SSE, but to keep the\ncheck simple, play it conservative.",
"is_bot": false,
"headline": "Disable SSE on Windows 95 and Windows NT4 and before",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-27T12:50:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "546da5c0f40a2b7f77aa9f60bcdec7699f2edc92",
"body": "Also store results shared across assembly blocks.",
"is_bot": false,
"headline": "Mark XMM registers as clobbered",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-27T12:50:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb92ede9ba5162d0b8134cd1ff57751df6f3dbe6",
"body": "Check various boundaries while reading hdrl.",
"is_bot": false,
"headline": "Fix CVE-2026-5673",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-26T20:12:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "014bc312d05241ff2d06fd52ee7cbbec3768bfd6",
"body": "Only a succesful test can get used and only the most powerful is\nretained.",
"is_bot": false,
"headline": "Fix ARM ASFLAGS probing",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-11T20:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a59533f68a2a0ec4e2debfa9c6059660c8e5ecd1",
"body": null,
"is_bot": false,
"headline": "Fix typo",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-11T20:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c74576b94599e8d01547eff725dc75240874ad5c",
"body": "This fixes build on LLVM based assembler (Android).",
"is_bot": false,
"headline": "Fix ARM assembly code to conform to ARM specification",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-11T20:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edfba372beb02ff70a1e2797d8cf561c242d0e0b",
"body": "The declarations used function argument identifiers prefixed with double\nunderscore.\nIdentifiers with double underscore prefix are reserved identifiers.\n\nThis breaks in practice on MinGW-w64, where __argc and __argv are macros.",
"is_bot": false,
"headline": "Fix getopt declarations.",
"author_name": "Jörn Heusipp",
"author_login": "manxorist",
"committed_at": "2026-01-05T17:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7ed484377fc7c3dd2b3d9b65fc6e405428c6eca",
"body": "rint is part of C99 and defined by modern MinGW-w64.\nThe definition conflicts with the standard-provided definition.\nRename rint to th_rint.",
"is_bot": false,
"headline": "Fix rint declaration.",
"author_name": "Jörn Heusipp",
"author_login": "manxorist",
"committed_at": "2025-11-07T15:26:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23161c4a63fd9f9d09b9e972f95def2d56c777af",
"body": "since they are the default and suggested modes",
"is_bot": false,
"headline": "encoder_example: list -a and -v before other modes",
"author_name": "Fabio Pedretti",
"author_login": "FabioPedretti",
"committed_at": "2025-07-04T01:07:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b167cb4a3e3e2d3239d71f0ca2cbc25af4f2183c",
"body": "These were forgotten when arm support were imporoved.\n\nFixes #2338",
"is_bot": false,
"headline": "Added missing arm related files to tarball.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-04-03T03:28:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa233f712c8d79419c52befc24040225760052f5",
"body": "Export the .tar.xz and .zip source packages as well as the\nbase tar.gz version. Some downstream projects (VLC) expect\nthe tar.xz version and this makes it easier to reference.\n\nAlso log the checksums of the source packages generated\nby `make distcheck` for later comparison.",
"is_bot": false,
"headline": "gitlab-ci: export all source package versions",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2025-04-02T03:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e4808736e9c181b971306cc3f05df9e61354004",
"body": "Increased libtool TH*_LIB_CURRENT and thus minor version of SONAME as\nimplementation of the library changed.\n\nAdjusted THDEC_LIB_REVISION which was forgotten in the 1.2.0beta1\nrelease.\n\nFixes #2319.\nFixes #17 on github.",
"is_bot": false,
"headline": "Final release 1.2.0.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-29T06:01:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21d1f8132ca8596d047888edb5a922f78bf369f4",
"body": "This is already being done for GCC et al.",
"is_bot": false,
"headline": "examples: disable clang op precedence warnings",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2025-03-27T20:04:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce728a87f205346409af6c6304912f220b8b763f",
"body": null,
"is_bot": false,
"headline": "AUTHORS: add tmatth",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2025-03-27T20:04:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cffa6f5c30fd6db7bd2ab2bebdbb2461d4b0b9bb",
"body": "…mple.",
"is_bot": false,
"headline": "Mention aoss and alsa-oss as alternatives to fix audio for player_exa…",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-27T18:43:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35e103dcab972af3f21580193402a13b8c35f9c9",
"body": "\"This solves compilation issues from the future.\" - the original commit message, however\nsince that was 10 years ago the \"future\" has most likely passed.\n\nSigned-off-by: Tristan Matthews <tmatth@videolan.org>",
"is_bot": false,
"headline": "configure: fix broken compiler differentiation",
"author_name": "Felix Paul Kühne",
"author_login": "fkuehne",
"committed_at": "2025-03-26T13:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3ee0f56702afb2b8c688ed583aabfbb921919c0",
"body": "Signed-off-by: Petter Reinholdtsen <pere@hungry.com>",
"is_bot": false,
"headline": "Fix repetition in help output of encoder_example.c.",
"author_name": "Fabio Pedretti",
"author_login": "FabioPedretti",
"committed_at": "2025-03-24T03:29:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cec37c4d2ae433e25f6680e2b5a1e2aa7fdad87",
"body": "Signed-off-by: Petter Reinholdtsen <pere@hungry.com>",
"is_bot": false,
"headline": "Fixed encoder_example.c help options alignment.",
"author_name": "Fabio Pedretti",
"author_login": "FabioPedretti",
"committed_at": "2025-03-24T03:28:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c033d7cc83394d37c8657f2fd46e513631f005c",
"body": "Updated the most used links and a few more after manually checking the\nhttps variant of the link still lead to a web page. Some URLs no longer\nwork, these were not changed to https. Also changed xiph.org->www.xiph.org.\n\nDid not change anything in the draft RFCs.\n\nFixes #2332",
"is_bot": false,
"headline": "Switched links to https where possible and standardized links a bit.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-22T07:58:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b629fcef9b1f2c8fcd1ba0649ef2eb3529de7f99",
"body": "Patch from fabio, wrapped to fit within 80 char lines, and added\nexit code 1 to error situations.\n\nFixes #2336",
"is_bot": false,
"headline": "Improved and corrected encoder_example_ffmpeg example.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-21T20:46:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fe11a33574d977fcacd612d26a64aa3d4cca56b",
"body": "Leftover from 10b3ce94133f63f6f3606e7e0eb82f1e1a79ec0c.\n\nFixes #2335",
"is_bot": false,
"headline": "Use ogg version subst variable in theoraenc-uninstalled.pc.in.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-21T06:14:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de72823f7680b256abc0486f2c737427ba4fd78",
"body": null,
"is_bot": false,
"headline": "Fix typos using codespell",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2025-03-20T16:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0492317237b00e654fb9ace4d14ae0e08faf9813",
"body": null,
"is_bot": false,
"headline": "Got github CI working on both Ubuntu and MacOSX.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T19:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1342671f78ac1838aa177cbafa7dc41f120159b7",
"body": null,
"is_bot": false,
"headline": "Tird try at github CI setup.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T19:05:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b463a2ee20ce213261077ceca5e07349e57935c",
"body": null,
"is_bot": false,
"headline": "Second try at github CI setup.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T19:02:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d78fe6e249dd789b5c4e042b794030938d184cf8",
"body": "This allow us to see how the MacOSX build is working.",
"is_bot": false,
"headline": "Added draft CI setup for github, including macosx check.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T17:40:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd4c6b22956324862b9a47ee249195997b7048bf",
"body": "This better reflect the set of tools involved.",
"is_bot": false,
"headline": "Renamed CI template and prefix from autoconf to autotools.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T17:35:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f4aba13fea361f0873b81d38ed2daa56f024912",
"body": "This avoid calling malloc(0) expecting a non-NULL pointer returned,\nand make the code in oc_comment_unpack() not depend on non POSIX specified\nbehaviour.\n\nEnsured comment_lengths and user_comments are NULL if there are no comments.\n\nThanks to Eric Lasota for noticing.\n\nFixes #2304",
"is_bot": false,
"headline": "Dropped to allocate memory for comments when there are none.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-17T19:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10b3ce94133f63f6f3606e7e0eb82f1e1a79ec0c",
"body": "Document the need for ogg 1.3.4 and use the 1.2.0 version number\nmore places. Move required ogg version to configure.ac substitution\nvariable.\n\nFixes #2328",
"is_bot": false,
"headline": "Updated requirement information in README, .pc and spec files.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T17:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ab2119260aa15e87ae72f9f766019ae789d6d0",
"body": "Based on script posted to https://bugs.debian.org/516343 in 2009\nby Robert Millan.\n\nFixes #1601",
"is_bot": false,
"headline": "Added example wrapper script encoder_example_ffmpeg.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T17:31:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad29a421144e2d6a7a25542619c3e2c216dd9b8c",
"body": "Fixes #2331",
"is_bot": false,
"headline": "Corrected and moved codename information to README.md.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T17:10:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc8bfe5ad051de5c402b9817e8b04404d65a98f3",
"body": null,
"is_bot": false,
"headline": "Added codename to 1.1 release Thunar in CHANGES.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T08:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69cf61ef163666f53a48374d3e8df7225913194d",
"body": "Increased libtool TH*_LIB_CURRENT and thus minor version of SONAME as\nAPI of a few methods changes by adding 'const' to some of the char *\narguments in codec.h.\n\nA 1.2.0 release is planned in two weeks.\n\nRelated to #2319.",
"is_bot": false,
"headline": "New release 1.2.0beta1.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-15T06:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcc5d21e664c0a20654c357a1515985239486f58",
"body": "CI currently does not thoroughly test encoding and decoding (except for\nencoding zeroed dummy frames).\nTesting --disable-asm is still useful because it ensures that the code compiles\non platforms where there are no ASM optimizations and the generic C code paths\nare used.",
"is_bot": false,
"headline": "Add CI for --disable-asm.",
"author_name": "Jörn Heusipp",
"author_login": "manxorist",
"committed_at": "2025-03-14T09:50:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5ccaa141c9b01371e1a96c9b5782aad97ac71b8",
"body": "Adjust clang CI run to report warning about reserved identifiers.",
"is_bot": false,
"headline": "Renamed header file identifiers using C/C++ reserved name structure.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T22:03:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5665f86b8fd8345bb09469990e79221562ac204b",
"body": "A crash was discovered using input fuzzying, in th_decode_ceaderin()\nwhere the len value in the oc_fuff_tree_unpack() can end up as -1.\nAdded a check to ensure this do not happen.\n\nBased on feedback from Timothy B. Terriberry.\n\nThe issue was discovered using gcc sanitazion, which reported the follow\n[…]\nn.h:58\n #9 0x7cc9a5e29e3f in __libc_start_main_impl ../csu/libc-start.c:392\n #10 0x5d47100f9964 in _start (/home/uos/libtheora-18570/libtheora-18570/poc1+0x83964)\n\nFixes github pull request #19.",
"is_bot": false,
"headline": "Avoid negative bit shift operatoin in huffdec.c (CVE-2024-56431).",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T21:45:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "13c109148a9ea55c9d8d109e1d22a9beb8befe79",
"body": "Do not build examples, as it require libvorbis, and do not build\ndocumentation as it require a host of programs not available\nduring cross building.",
"is_bot": false,
"headline": "Added mingw CI build.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T17:21:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a8228a6f77bf74440db1b7b4fde7225bbaec8c3",
"body": "During video playout using player_example with gcc sanitaztions\nenabled, new bit shifting of negative values were discovered.\nReplaced this with multiplication too.",
"is_bot": false,
"headline": "Avoided bit shift of negative values in OC_MV() macro.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T15:45:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec642ecf6d94f11d5eb05ab1fb7a9728c9a89cae",
"body": "Leftover changes from a6766c94721bc55e8e56fb0d941ecfe2d27c3d17.\n\nUse multiplication instead, allowing the compiler to optimize to\nbitshifts if it believe it to be safe.\n\nPartly solves github issue #18.",
"is_bot": false,
"headline": "Replaced more possible bit shifting into signed bit of stride values.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T21:54:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dc3bd8a0042e9bc71477ddc9ca9cb3785c342ca",
"body": null,
"is_bot": false,
"headline": "Print config.log from CI if configure fail.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T21:01:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "996200e50973a517580218c188a8f4479187f41f",
"body": "These have not been updated since before the code was migrated to\ngit, and both no longer make sense and are not correct.",
"is_bot": false,
"headline": "Removed obsolete $ID / last mod lines from source.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c847ef09b7ac28fbf79134d06c9c99360fbd92a",
"body": null,
"is_bot": false,
"headline": "Updated copyright year for source files touched this year.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b5aee3f93c5f620a7f5b1777dbc6cf33b74e7ca",
"body": "The 'int x=x' style statement do not make sense and cause problems with\nsome compilers. Replace it with more sensible initializers to ensure\nthe value have a well known starting point. Using initializers\nproposed by Timothy B. Terriberry in !25.\n\nAdded -Werror=uninitialized -Winit-self to default GCC build to ensure\nthis style of statement do not sneak into the code again.\n\nFixes #2317",
"is_bot": false,
"headline": "Dropped self assignment when initialising variables in tokenize.c.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:37:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b51ac556dc133d17aab450497e28c77096264dee",
"body": "The security issue CVE-2024-56431 was discovered using GCC address\nsanitaztion. Make it easier to run this check, and run it in\ngitlab CI.\n\nBased on a comment in !28.",
"is_bot": false,
"headline": "Added configure option --enable-gcc-sanitizeers.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:13:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0669f7342598c152d88662c7b7b55fcf15cc8de6",
"body": "Ran 'cp Doxygen.in Doxygen; doxygen -u; cp Doxygen Doxygen.in' and\nremoved DOT_FONTNAME reference to non-free font.",
"is_bot": false,
"headline": "Updated doxygen setup to avoid warnings about obsolete entries.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T17:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cb634ec2c1a45e64f4fd56c78a572fc49593d30",
"body": "Check if argument is null before using this approach, and just return\nzero when the value to do bit count on is zero.\n\nFixes a issue discovered by --enable-gcc-sanitizers in !31:\n\n ../../lib/encode.c:1384:49: runtime error: passing zero to clz(),\n which is not a valid argument\n #0 0x7f0af5dae\n[…]\nmain.h:58\n #5 0x7f0af51d3304 in __libc_start_main_impl ../csu/libc-start.c:360\n #6 0x55fd4beb1300 in _start\n (/home/user/libtheora/build/tests/.libs/granulepos_theoraenc+0x2300)\n\nFixes #2323",
"is_bot": false,
"headline": "Avoided calling __Builting_clz(0) with undefined behaviuor.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T17:50:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62b266ae4e2465ab24b5ed4761044e2af3015fee",
"body": "The last iteration of the loop execute 1<<63, which would push the\nresult into the signed bit of a signed 64 bit type, and this\nmove into currently undefined behaviour with C99. Avoid the\nissue by making the operation work on unsigned 64 bit type instead.\n\nThis require libogg version to 1.3.4, raise autotools dependency check\nto look for this.\n\nPartly solves github issue #18.",
"is_bot": false,
"headline": "Made mask unsigned to avoid shifting into sign bit.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T17:36:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15acdb8e79fbd8e0456ffe913c207deb39443a88",
"body": "Use multiplication instead, allowing the compiler to optimize to\nbitshifts if it believe it to be safe.\n\nFixes a few issues discovered by --enable-gcc-sanitize-address in !31.",
"is_bot": false,
"headline": "Avoided undefined bit shifting of signed value.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T16:13:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6766c94721bc55e8e56fb0d941ecfe2d27c3d17",
"body": "Use multiplication instead, allowing the compiler to optimize to\nbitshifts if it believe it to be safe.\n\nPartly solves github issue #18.",
"is_bot": false,
"headline": "Replaced possible bit shifting into signed bit of stride values.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T15:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4549f5467e1fc62f9d9d386592e1f5859accf930",
"body": "It is undefined what left-shifting a negative number should do, and the\ncompiler do not like trying to shift the -64 value 57 bits to the left.\n\nChanged the definition of OC_Q57() to left shift one bit and\nuse multiplication, to change the operatoin to a well defined one.\nPatch from Timothy B_ Terri\n[…]\n ^~~~~~~~~~~\n> ../../lib/mathops.h:134:38: note: expanded from macro 'OC_Q57'\n> #define OC_Q57(_v) ((ogg_int64_t)(_v)<<57)\n> ~~~~~~~~~~~~~~~~~^\n\nMR !23 fixes #2321",
"is_bot": false,
"headline": "Avoid undefined shifting of negative number in rate.c.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T15:45:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8616710dc60879500ae08aba00c417658f9bb209",
"body": "This will make it easier for prospective users and developers to\nlocate the mailman lists.",
"is_bot": false,
"headline": "Added links in README.md to mailing lists.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T15:28:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "475e32d34c8cab913755d0d0185636290d4c583e",
"body": "…updated when releasing.",
"is_bot": false,
"headline": "Make it more obvious in configure.as that libtool numbers need to be …",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T12:01:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a768e3568feccd4953dc54886d05c4c2f710e561",
"body": "…e _mag.\n\nInstead of shifting the negative number, shift one bit and multiply\nit with the negative number.\n\nFixes the following clang message:\n../../lib/decode.c:195:3: warning: shifting a negative signed value is undefined [-Wshift-negative-value]\n OC_DCT_CW_PACK( 0,10, -1,0),\n ^~~~~~~~~~~~~~~~~~\n[…]\n]\n OC_DCT_CW_PACK( 0, 0,-12,0),\n ^~~~~~~~~~~~~~~~~~~~~~~~~~~\n../../lib/decode.c:150:16: note: expanded from macro 'OC_DCT_CW_PACK'\n (_mag)-(_flip)<<OC_DCT_CW_MAG_SHIFT)\n ~~~~~~~~~~~~~~^\n\nFixes #2322",
"is_bot": false,
"headline": "Adjusted OC_DCT_CW_PACK() for well defined C99 behaviour with negativ…",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T23:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f7c9abd4d6ebb8388dd07d24099c3b8afec62481",
"body": "Switching type of cd from unsigned to int make sure the difference\npassed to abs() wil be a signed value.\n\nAs dc is calculated to at most ((8 * 8 * (2^8-1)) + 32) / 64, ie 255\nand the highest value it can hold before it is shifted 6 bit positions\nto the right is (8 * 8 * (2^8-1)) + 32) ie. 16352, it\n[…]\n ^\n../../../lib/encfrag.c:104:26: note: remove the call to 'abs' since unsigned values cannot be negative\n for(j=0;j<8;j++)sad+=abs(_src[j]-dc);\n ^~~",
"is_bot": false,
"headline": "Make sure difference in encfrag.c is signed when taking absolute value.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T22:26:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4b90527c95368382c8675f6cb1c2a9a42c8a2608",
"body": "This get rid of the following clang warning:\n\nhuffdec.c:439:7: warning: variable 'total' set but not used [-Wunused-but-set-variable]\n int total;\n ^",
"is_bot": false,
"headline": "Stopped calculated unused total in oc_huff_tree_size().",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T20:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "877ac81181e93a61dc0f1d5fd02dbf7e4cf6fa4f",
"body": "The OC_IDCT_CONSTS array in x86/sse2idct.c is 64 elements long, so\nnot use trying to pretend it is 128 elements long.\n\nThis avoid the following copmiler message:\n\nIn function 'oc_idct8x8_slow_mmx',\n inlined from 'oc_idct8x8_mmx' at ../../lib/x86/mmxidct.c:555:8:\n../../lib/x86/mmxidct.c:290:3: war\n[…]\ne: object 'OC_IDCT_CONSTS' of size 128\n 26 | const unsigned short __attribute__((aligned(16),used)) OC_IDCT_CONSTS[64]={\n | ^~~~~~~~~~~~~~",
"is_bot": false,
"headline": "Adjusted macros to avoid working outside OC_IDCT_CONSTS array.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T09:35:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb3e5cad5e15e18d9876499a3b6fdfb2d31d701d",
"body": "The arrays are 5 elements long, but some intermittent methods claim it\nwas just four elements.",
"is_bot": false,
"headline": "Use correct array length in method definitions in analyze.c.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T22:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2fe318c48125842811d43b5f486541ed5ef9a64",
"body": "Made sure the implementation matches the prototype.",
"is_bot": false,
"headline": "Corrected method definition for oc_enc_frag_sub_128_c().",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T22:19:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf9371ec5f272851fee8b22f64c121e494edd5a",
"body": "Rewrites 2fb974cf60823b7692bf44f229020bb6b588151f.",
"is_bot": false,
"headline": "Corrected documentation LaTex activation of UTF-8 encoding.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T21:24:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f306a2353818cd514e34b2eadb29430361435ac2",
"body": "This will avoid running valgrind on bash and instead validate the\ntest programs themselves.",
"is_bot": false,
"headline": "Switched valgrind run to use LOG_COMPILER and fail on valgrind errors.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T20:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fb974cf60823b7692bf44f229020bb6b588151f",
"body": "…rrors",
"is_bot": false,
"headline": "Add support for the \\texttrademark character to avoid utf8 encoding e…",
"author_name": "Billae",
"author_login": null,
"committed_at": "2025-03-07T20:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56615e2355c17919400285be408eecbb59b34aa4",
"body": "This avoid a crash on bogus input, just exit with a message instead.\n\nFixes #2305",
"is_bot": false,
"headline": "Improve encoder example to reject audio without any channels.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T18:36:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01e16d5d3ddd626bcfc7d480603d0a6bebb9bf14",
"body": "Using ogg_uint32_t and uint8_t instead.\n\nGet rid of the following compiler message:\n\n../../examples/tiff2theora.c:283:1: warning: ‘uint32’ is deprecated [-Wdeprecated-declarations]\n 283 | rgb_to_yuv(uint32 *raster,\n | ^~~~~~~~~~\n../../examples/tiff2theora.c: In function ‘rgb_to_yuv’:\n../../exa\n[…]\n | uint32 *raster;\n | ^~~~~~\n../../examples/tiff2theora.c:404:3: warning: ‘uint32’ is deprecated [-Wdeprecated-declarations]\n 404 | raster = malloc(pixels*sizeof(uint32));\n | ^~~~~~",
"is_bot": false,
"headline": "Replaced obsolete uint32 and uint8 with more standard types in example.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:54:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "794bf8c64c549642156563479a6e4c6cb9a39fa6",
"body": "The ftime method has been removed from POSIX and is depricated on Linux.\nclock_gettime() work better on Linux, but is not available on Windows,\nso fall back to ftime() if autotools/scons fail to detect clock_gettime().\n\nBased on proposal in\nhttps://gitlab.xiph.org/xiph/opusfile/-/merge_requests/9.\n\n\n[…]\n | ftime(&after);\n | ^~~~~\n/usr/include/x86_64-linux-gnu/sys/timeb.h:29:12: note: declared here\n 29 | extern int ftime (struct timeb *__timebuf)\n | ^~~~~",
"is_bot": false,
"headline": "Rewrote dump_video example to prefer clock_gettime() over ftime()",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:50:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "46df56a55afc5452e1e6dcdb68daa55ebd803907",
"body": "The header used signed char _bf[256], make sure the method uses the\nsame. Adjust pointer arithmetic to use array notation to make operation\nexplicit.\n\nAvoid the following compiler message:\n\n../../lib/state.c:1056:15: warning: argument 2 of type 'signed char *' declared as a pointer [-Warray-paramet\n[…]\nate.c:20:\n../../lib/state.h:526:14: note: previously declared as an array 'signed char[256]'\n 526 | signed char _bv[256],int _refi,int _pli,int _fragy0,int _fragy_end);\n | ~~~~~~~~~~~~^~~~~~~~",
"is_bot": false,
"headline": "Use consistent declaration of oc_state_loop_filter_frag_rows_c().",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:17:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "47388cd816794933d276987dee0a73348911acf5",
"body": "…options.",
"is_bot": false,
"headline": "Added CI tests for --disable-encode and --enable-telemetry configure …",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:07:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34bf876678f87614ebe24d78c037601d9e01052e",
"body": "This avoid obsolete notation.\n\nIncrease autoconf dependency to version 2.71.",
"is_bot": false,
"headline": "Updated autotools setup to avoid warnings from autogen.sh.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T16:39:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14045376ee6897f20f6bb9815f246172da748e50",
"body": "Added info.c to libtheoraenc source and dropped library dependency on libtheoradec.\n\nAddresses issue reported in https://bugs.debian.org/923940 about some symbols being unresolved.",
"is_bot": false,
"headline": "Made sure libtheoraenc do not need libtheoradec.",
"author_name": "petterreinholdtsen",
"author_login": "petterreinholdtsen",
"committed_at": "2025-03-07T16:19:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3446dd669309655ab30af91660a9adb16793c019",
"body": "…build.",
"is_bot": false,
"headline": "Updated gitlab CI run to newer gcc/debian and check clang and subdir …",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T15:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "070b5c400b3a384c71cace537f945cad9b02bf52",
"body": "Both POSIX, the Linux documentation and UNIX Network Programming volume 1\nby Stephens state that NULL is accepted.\n\nThis avoid the following compiler message:\n\n../../examples/player_example.c: In function ‘main’:\n../../examples/player_example.c:839:22: warning: passing argument 2 to ‘restrict’-quali\n[…]\n: passing argument 2 to ‘restrict’-qualified parameter aliases with argument 4 [-Werror=restrict]\n 843 | select(n,&empty,&writefs,&empty,NULL);\n | ^~~~~~ ~~~~~~",
"is_bot": false,
"headline": "Dropped passing dummy variable to select() in example, use NULL instead.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T15:26:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7180717276af1ebc7da15c83162d6c5d6203aabf",
"body": "Apparently this still has users, so test it, rather than\nremoving it. Verify we can build and clean up without error.",
"is_bot": false,
"headline": "gitlab-ci: Add scons build.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-10-27T16:17:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a83d0a24720ef1136616c59275c9d32aabfeb7",
"body": "Add a build description for gitlab's continuous integration build\nand test runners. This gives us ongoing converage on commmits\nand merge requests in the upstream repository.\n\nBased on the gcc:9 image we currently use for most projects.\nIt already includes make and autotools, but we need to install\n\n[…]\njob at the test stage clears all the\ngenerated artefacts, which means we lose our configure script\nand makefiles. Therefore isn't more efficient to just do the\ntests as extra steps in the build stage.",
"is_bot": false,
"headline": "Add a gitlab ci configuration.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-10-27T16:13:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1790452acdff555b5ac5ba880a868fd44a417521",
"body": null,
"is_bot": false,
"headline": "build: fix make distcheck target",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2020-10-24T16:02:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f38d062e17cf90198c0e5db98379b01624821e4",
"body": "GStreamer's \"theoradec\" element always calls th_decode_ctl() for all telemetry\noptions, passing 0 if they are not enabled. This results in our creating a\nCairo buffer and performing YUV/RGB conversion, even if all telemetry is\ndisabled, which is very slow and can cause noticeable lag during playback.",
"is_bot": false,
"headline": "Avoid creating a Cairo buffer if all telemetry options are set to 0.",
"author_name": "Zebediah Figura",
"author_login": null,
"committed_at": "2020-10-22T15:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f98989ad7c3745d6cc4d24666e64046ff4a3f745",
"body": "Align indents to two spaces for cosmetic uniformity.",
"is_bot": false,
"headline": "scons: Fix indent.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-06-18T18:27:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94e68ccbc5d896ab728e2550f92c8ffe1b636204",
"body": "Signed-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Use Python 3 compatible print function in SConstruct",
"author_name": "Jan Niklas Hasse",
"author_login": "jhasse",
"committed_at": "2020-06-18T18:26:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e885eac7c23d2f312f49cd5138c0175008e2c9",
"body": "Signed-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Fix warning logical-op-parentheses",
"author_name": "Jan Niklas Hasse",
"author_login": "jhasse",
"committed_at": "2020-02-25T17:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f370e39e08f655ed5ca4de5d2ab4e4b7aafea795",
"body": "From GCC documentation (for GCC 5 and above):\n- ‘+’ means that this operand is both read and written by the instruction.\n- Only read-only operands can use ‘%’.\n\nThus, ‘+’ and ‘%’ cannot be used at the same time.\n\nSigned-off-by: Timothy B. Terriberry <tterribe@xiph.org>\nSigned-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Remove wrong asm constraint modifier",
"author_name": "Sebastian Buchwald",
"author_login": "UniQP",
"committed_at": "2020-02-25T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0c4992b5a8440160e70f3bb1cd0e6d4f4a97c1",
"body": "Conform to local style, use shorter variable names, and add\nsome comments so the intent of the flow is more clear.\n\nAlso propagate the check to the transcoder example which\nduplicates the same code.",
"is_bot": false,
"headline": "CVE-2017-14633: Clean up and propagate the error check.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5159e325c19e3ca24c0faee10550edda7c105a95",
"body": "Abort on error from `vorbis_analysis_headerout`.\n\nSigned-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "CVE-2017-14633: Add check so we abort on too many channels",
"author_name": "Guido Günther",
"author_login": "agx",
"committed_at": "2020-02-25T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "065ac6494707a1e4bea491f8ed5889a2323c278f",
"body": "Add these to .gitignore so they don't clutter up version control\nstatus messages and grep output.",
"is_bot": false,
"headline": "Ignore files generated by `make check`.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T16:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03889a6e3054c1c19d10cacadcb9f6305f8e2d79",
"body": "Update links and place the description further away in time;\nthis codec isn't widely used any more.",
"is_bot": false,
"headline": "README: update text.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T16:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52d54070f03fe5ae5ce854d256ecc3d3d0ad8c0b",
"body": "This is more readable on the gitlab/github landing pages.",
"is_bot": false,
"headline": "Convert README to markdown.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T16:39:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4933e44ead8f5acccbc8140a2b041bed77a58614",
"body": "This will bail on files exceeding 16384x16384 (useful for fuzzing).",
"is_bot": false,
"headline": "configure: add --enable-mem-constraint option",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2020-02-14T15:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5d205bfe849f1b41f45b91a0b71a3bdc6cd458f",
"body": "These were left as a convenience for those on old systems.\nAutomake 1.11 is pretty widely available now.",
"is_bot": false,
"headline": "Clean up old automake options.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21f079ac45c6b064819fb0360efaa99b3d805dc3",
"body": "This is more appropriate now that we've moved the primary repository\ninto git from subversion.",
"is_bot": false,
"headline": "Rename version suffix to +git.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:11:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f506d4c3c6de738747987f588a46e9f992e5388",
"body": "Replace our more complex autogen.sh script with a copy of the\none from the Opus repository, which just calls autoreconf. That\ncommand does the same things more efficiently and is reliably\navailable now.",
"is_bot": false,
"headline": "Update autogen.sh script to just call autoreconf.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:09:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66e7937e42f1122b2a97dfc603d527869d6457eb",
"body": "This prefixes generated object file names with their relative\npath. The idea is to avoid conflicts. We don't have any, but\nautomake warns about the issue, so set the option to address that.",
"is_bot": false,
"headline": "Set subdir-objects automake option.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:08:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2df21a61c74ac804fb7933a1ae2e61a5336501a3",
"body": "Signed-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Add CPU detection on RISC OS.",
"author_name": "Cameron Cawley",
"author_login": "ccawley2011",
"committed_at": "2017-10-23T19:32:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa5707d68c2a4338d58aa8b6afc95539ba89fecb",
"body": "Seems to only effect OS X according to Travis CI",
"is_bot": false,
"headline": "Fix build for --disable-encode",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2017-07-20T02:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6d6765ddc9458c1bdc9f008d2ee4c82d27fb827",
"body": null,
"is_bot": false,
"headline": "ci: libogg is needed for tests",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2017-07-19T02:28:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "678a025bc335b2a151599fe2d64c5e71511184a4",
"body": null,
"is_bot": false,
"headline": "ci: add .travis.yml based on daala's",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2017-07-19T02:12:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b97ef834c491bddb0f09804b4be2ff5c49cb1a61",
"body": "The package enumeration tests in configure weren't relative to the\n ${srcdir}, and the Makefile.am rules didn't handle a destination\n directory different from the source directory.",
"is_bot": false,
"headline": "spec: Fix out of tree builds for the specification",
"author_name": "Timothy B. Terriberry",
"author_login": null,
"committed_at": "2017-06-05T15:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91203fdfdc0eb06cd87409d47e35d9ee5471a90f",
"body": "Global pointers are initialized to zero in C, but not in C++.\n\nAdd an explicit initializer to reduce confusion and avoid\nbugs when the example code is copied into C++ applications.\n\nBased on a patch by Alex Houghton <houghton1411@aol.com>.",
"is_bot": false,
"headline": "Initialize global pointers in examples.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2016-11-28T21:28:31Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 3,
"commits_last_year": 14,
"latest_release_at": "2025-03-29T06:01:11Z",
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_last_push": 73,
"active_weeks_last_year": 5,
"days_since_latest_release": 481,
"mean_days_between_releases": 2832.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 79,
"stars": 125,
"watchers": 19,
"fork_history": {
"days": [
{
"date": "2015-05-28",
"count": 1
},
{
"date": "2015-09-20",
"count": 1
},
{
"date": "2015-09-22",
"count": 1
},
{
"date": "2015-10-03",
"count": 1
},
{
"date": "2016-01-11",
"count": 1
},
{
"date": "2016-05-11",
"count": 1
},
{
"date": "2016-05-25",
"count": 1
},
{
"date": "2016-08-24",
"count": 1
},
{
"date": "2016-11-28",
"count": 1
},
{
"date": "2017-01-07",
"count": 1
},
{
"date": "2017-02-12",
"count": 1
},
{
"date": "2017-03-10",
"count": 1
},
{
"date": "2017-06-07",
"count": 1
},
{
"date": "2017-07-19",
"count": 1
},
{
"date": "2017-09-29",
"count": 1
},
{
"date": "2017-09-30",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-10-31",
"count": 1
},
{
"date": "2017-12-21",
"count": 1
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-05-21",
"count": 1
},
{
"date": "2018-07-20",
"count": 1
},
{
"date": "2019-01-12",
"count": 1
},
{
"date": "2019-08-15",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2020-03-23",
"count": 1
},
{
"date": "2020-04-14",
"count": 1
},
{
"date": "2020-05-01",
"count": 1
},
{
"date": "2020-08-12",
"count": 2
},
{
"date": "2020-09-08",
"count": 1
},
{
"date": "2020-09-29",
"count": 1
},
{
"date": "2020-11-04",
"count": 1
},
{
"date": "2020-11-19",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-05-06",
"count": 1
},
{
"date": "2021-11-22",
"count": 1
},
{
"date": "2022-02-05",
"count": 1
},
{
"date": "2022-04-16",
"count": 1
},
{
"date": "2022-04-21",
"count": 1
},
{
"date": "2022-05-19",
"count": 1
},
{
"date": "2022-09-03",
"count": 1
},
{
"date": "2022-11-24",
"count": 1
},
{
"date": "2022-12-31",
"count": 1
},
{
"date": "2023-02-13",
"count": 1
},
{
"date": "2023-03-22",
"count": 1
},
{
"date": "2023-05-13",
"count": 1
},
{
"date": "2023-09-21",
"count": 1
},
{
"date": "2023-09-29",
"count": 1
},
{
"date": "2023-10-10",
"count": 1
},
{
"date": "2024-02-16",
"count": 1
},
{
"date": "2024-05-18",
"count": 1
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-08-10",
"count": 1
},
{
"date": "2024-12-23",
"count": 1
},
{
"date": "2025-01-02",
"count": 2
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-11",
"count": 1
},
{
"date": "2025-05-05",
"count": 1
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-06-05",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
}
],
"complete": true,
"collected": 67,
"total_forks": 79
},
"star_history": null,
"open_issues_and_prs": 8
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"win32/xmingw32/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 107042,
"source_files_sampled": 124,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 0,
"open_issues": 6,
"closed_ratio": 0.455,
"closed_issues": 5,
"closed_unmerged_prs": 12
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "rillian",
"commits": 62,
"avatar_url": "https://avatars.githubusercontent.com/u/225102?v=4"
},
{
"type": "User",
"login": "tmatth",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/66862?v=4"
},
{
"type": "User",
"login": "lephilousophe",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1492917?v=4"
},
{
"type": "User",
"login": "gmaxwell",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/858454?v=4"
},
{
"type": "User",
"login": "FabioPedretti",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/3390837?v=4"
},
{
"type": "User",
"login": "manxorist",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/6185338?v=4"
},
{
"type": "User",
"login": "jhasse",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/80071?v=4"
},
{
"type": "User",
"login": "ccawley2011",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/19293424?v=4"
},
{
"type": "User",
"login": "dschleef",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3475024?v=4"
},
{
"type": "User",
"login": "fkuehne",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/116994?v=4"
}
],
"contributors_sampled": 14,
"top_contributor_share": 0.626
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"autotools.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 7,
"reason": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "28fd5ec77f0ad0e07a371cef1047828116f6bd8a",
"ran_at": "2026-07-23T19:32:51Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-01T02:57:32Z",
"oldest_open_prs": [
{
"number": 14,
"created_at": "2020-09-30T07:31:44Z",
"last_comment_at": "2025-04-01T12:02:31Z",
"last_comment_author": "mcmtroffaes"
},
{
"number": 25,
"created_at": "2026-06-11T22:24:02Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": null,
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 10,
"created_at": "2020-01-20T15:18:11Z",
"last_comment_at": "2025-03-24T12:10:17Z",
"last_comment_author": "petterreinholdtsen"
},
{
"number": 20,
"created_at": "2025-03-20T08:17:47Z",
"last_comment_at": "2025-03-24T12:07:45Z",
"last_comment_author": "petterreinholdtsen"
},
{
"number": 21,
"created_at": "2025-06-06T10:45:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 22,
"created_at": "2025-07-03T15:26:44Z",
"last_comment_at": "2025-07-04T00:44:46Z",
"last_comment_author": "rillian"
},
{
"number": 23,
"created_at": "2026-01-25T17:46:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2026-03-21T16:29:45Z",
"last_comment_at": "2026-04-07T00:35:32Z",
"last_comment_author": "BreakingBad6"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/xiph/theora",
"host": "github.com",
"name": "theora",
"owner": "xiph"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"security": 39,
"vitality": 36,
"community": 51,
"governance": 45,
"engineering": 72
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 36,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"commits_last_year": 14,
"human_commit_share": 1,
"days_since_last_push": 73,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 73 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 73
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "14 commits in the last year",
"points": 10.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 14
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_latest_release": 481,
"mean_days_between_releases": 2832.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 481 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 481
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2832.2 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2832.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 73,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 73 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 73
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 51,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"forks": 79,
"stars": 125,
"watchers": 19,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "125 stars",
"points": 34,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 125
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "79 forks",
"points": 15.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 79
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "19 watchers",
"points": 7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 19
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 45,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 14,
"top_contributor_share": 0.626
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 63% of commits",
"points": 8.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 63
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "14 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 14
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"merged_prs": 0,
"open_issues": 6,
"closed_issues": 5,
"issue_closed_ratio": 0.455,
"closed_unmerged_prs": 12
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "46% of issues closed",
"points": 21.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 46
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/12 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 12
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"followers": 631,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "xiph",
"public_repos": 36,
"account_age_days": 4370
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "631 followers of xiph",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 631,
"login": "xiph"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "36 public repos, account ~11 yr old",
"points": 23.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 36
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 72,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"video",
"codec",
"compression",
"theora",
"ogg",
"libtheora"
],
"has_wiki": false,
"homepage": "https://theora.org/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://theora.org/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 39,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.61,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "61 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 32.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 61,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"win32/xmingw32/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "win32/xmingw32/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "win32/xmingw32/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 107042,
"source_files_sampled": 124,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/124 source files over 60KB",
"points": 53.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 124,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-23T19:33:03.048762Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/x/xiph/theora.svg",
"full_name": "xiph/theora",
"license_state": "custom",
"license_spdx": null
}