公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 04:33 UTC
zyra / gobac
BACnet protocol implementation in Golang
zyra/gobac 的健康指数为 100 分中的 57 分，处于「中等」区间。 其得分最高的类别是Engineering Quality（80/100），最低的是Community & Adoption（24/100）。 最近一次更新在 3 天前。 近期的大部分工作由 1 位贡献者完成。
57
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
57
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/zyra/gobac/v2 | v2.2.0 | - | 4 | 3 天前 |
| Go | github.com/zyra/gobac | v1.5.9 | - | 20 | 1957 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
69
开发活跃度
64中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 3 天前 |
| 0.7/36 | 提交节奏 — 52 周中有 1 周有提交 |
| 17.4/18 | 提交量 — 最近一年 86 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 86 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 1 |
发布纪律
76良好
评分方式
| 27/27 | 有发布版本 — 已发布 12 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 3 天前 |
| 12.6/27 | 发布节奏 — 约每 273.4 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 12 |
| latest_release_tag | v2.2.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 3 |
| mean_days_between_releases | 273.4 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
24
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 1 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 2 位关注者 |
所用输入
| forks | 0 |
| stars | 1 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
61
维护者韧性（巴士系数）
20危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 6 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
85优秀
评分方式
| 46.8/46.8 | 议题解决 — 100% 的议题已关闭 |
| 38.2/38.3 | PR 接受 — 已裁定的 PR 中 9/9 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 9 |
| open_issues | 0 |
| closed_issues | 1 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 0 |
所有权与托管责任
56中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 4.3/25 | 所有者影响力 — zyra 有 3 位关注者 |
| 21.6/25 | 既往记录 — 20 个公开仓库，账户约 10 年 |
所用输入
| followers | 3 |
| owner_type | Organization |
| is_verified | — |
| owner_login | zyra |
| public_repos | 20 |
| account_age_days | 3,809 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 2 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 3 天前 |
| 20/20 | 版本历史 — 20 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/zyra/gobac/v2, github.com/zyra/gobac |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 3 |
工程质量
基础的工程与文档实践是否到位？
80
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 3 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .flake8 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
75良好
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
40
安全态势
40存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 0/7.5 | Vulnerabilities — 26 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4 |
已排除计分（无数据或不适用）：packaging。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
56
AI 代理上下文与指引
29危急
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 28.8/40 | 可读的提交历史 — 100 次人类提交中有 54 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.54 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 12.6/18 | 一条命令的引导启动 — go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod（工具链约定，无任务运行器） |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .flake8 |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 是 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod, vendor/gopkg.in/yaml.v2/go.mod |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 170 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 43,938 |
| source_files_sampled | 170 |
| oversized_source_files | 0 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
1GitHub 星标
1贡献者
86最近 12 个月提交数
3距最近推送天数
12发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数
数据采集警告
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 4.0 / 10
4.0综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/7 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 0 | Vulnerabilities | 26 existing vulnerabilities detected |
直接依赖 6
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/stretchr/testify | v1.4.0 | go.mod |
| Go | github.com/urfave/cli | v1.21.0 | go.mod |
| Go | golang.org/x/sys | v0.0.0-20190405154228-4b34438f7a67 | go.mod |
| Go | gopkg.in/yaml.v2 | v2.2.2 | go.mod |
| Go | fyne.io/fyne/v2 | v2.8.0 | gui/go.mod |
| Go | github.com/zyra/gobac/v2 | v2.0.0 | gui/go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1808,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 880290,
"Dockerfile": 135
},
"pushed_at": "2026-07-18T21:27:05Z",
"created_at": "2019-07-29T07:34:01Z",
"owner_type": "Organization",
"updated_at": "2026-07-18T21:27:09Z",
"description": "BACnet protocol implementation in Golang",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://zyramedia.com",
"name": "Zyra Media",
"type": "Organization",
"login": "zyra",
"company": null,
"location": "Toronto, ON",
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/17262907?v=4",
"created_at": "2016-02-16T02:01:09Z",
"is_verified": null,
"public_repos": 20,
"account_age_days": 3809
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-07-18T21:14:47Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-07-18T13:31:00Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-07-17T23:15:41Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-07-16T03:14:38Z"
},
{
"tag": "v1.5.9",
"kind": "patch",
"published_at": "2021-03-13T06:11:58Z"
},
{
"tag": "v1.5.8",
"kind": "patch",
"published_at": "2020-12-08T08:01:10Z"
},
{
"tag": "v1.5.7",
"kind": "patch",
"published_at": "2020-03-10T15:21:48Z"
},
{
"tag": "v1.5.6",
"kind": "patch",
"published_at": "2019-10-23T14:54:13Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2019-10-23T14:51:34Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2019-10-23T14:47:47Z"
},
{
"tag": "1.1",
"kind": "other",
"published_at": "2019-08-26T08:10:09Z"
},
{
"tag": "1.0",
"kind": "other",
"published_at": "2019-08-18T22:30:20Z"
}
],
"recent_commits": [
{
"oid": "60082a53f852711389dc53c94011bfe23d3d4cda",
"body": "Write Windows-native toolchain path for the arm64 GUI leg",
"is_bot": false,
"headline": "Merge pull request #10 from zyra/fix-win-arm64-path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:27:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d666b08f8853fe7be14e363221a733d3dfc9ef",
"body": null,
"is_bot": false,
"headline": "Write Windows-native toolchain path for the arm64 GUI leg",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:24:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811944cd2f5566055f000de159ef46fbbe561103",
"body": "Rework GUI for first-run usability",
"is_bot": false,
"headline": "Merge pull request #9 from zyra/gui-ux",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T21:13:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0cdebbcf39650ae3f33751f775b3a9f1066930",
"body": "Replace raw \"sweep failed:\", \"open failed:\", \"save failed:\", and\n\"simulation start failed:\" status text with plain sentences that\nstill include the underlying error as a short reason.",
"is_bot": false,
"headline": "Use plain-language wording for scan/open/save/simulation errors",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e1d569ae08df3f02ad563b168a3eb5ff84f21c9",
"body": "Automatic picked the alphabetically first non-loopback interface, so\na docker/bridge/veth interface could beat the real LAN NIC. Mark\ncandidates matching common virtual-interface prefixes and rank them\nafter physical ones in both the sorted list and Automatic's pick,\nwithout hiding them from the dropdown.",
"is_bot": false,
"headline": "Rank physical NICs ahead of virtual interfaces in Automatic",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22f582c8caa15af081513f8832d6a891f29740d8",
"body": "The nav List's item template was an empty-string label, so Fyne's\ncached per-row min size collapsed the whole rail to near zero width\nand long labels like \"Network Explorer\" rendered as \"Net\". Seed the\ntemplate with the widest actual nav label instead, and strengthen the\nrendered-launch test to assert the nav rail and each rendered nav\nlabel are at least as wide as their own MinSize.",
"is_bot": false,
"headline": "Fix nav rail clipping labels at natural width",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d762faf1af0673bc305ce1047a1b834e5114dc4",
"body": "Settings' Network dropdown gains \"All networks\" ahead of the\nexisting Automatic entry, persisting a \"*\" sentinel that\nStartFromSettings maps to the bacnet library's new wildcard listen.\nAutomatic keeps the \"(recommended)\" wording since its directed\nbroadcast is more reliable on multi-homed hosts than All networks'\nlimited broadcast.",
"is_bot": false,
"headline": "Add an All networks option to the Settings network picker",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61feeaec17e8ace4db5ecddc9b11afaa84491114",
"body": "getNetworkSet(\"\") now returns the wildcard source (0.0.0.0) paired\nwith the limited broadcast address (255.255.255.255) instead of\nfailing, so a Server can bind and send on every network the OS\nroutes to rather than one named interface. Named interfaces are\nunaffected.",
"is_bot": false,
"headline": "Library: support wildcard listen for all-networks binding",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:17:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "283b39534b9f8492d96014e714482961412e8f59",
"body": "Home greets first-run users with two big actions (Simulate a network,\nDiscover my network) plus a Settings shortcut instead of a blank pane.\nNav trims to Home / Network Explorer / Simulator; Object Browser is now\na drill-down of Network Explorer with a Back-to-results button rather\nthan its own top-level row. Discovery gets plain-language copy (Scan\nnetwork, an empty-state placeholder) and a launch failure now reports\n\"Not connected yet\" instead of a raw error.",
"is_bot": false,
"headline": "Add welcoming Home view and rework navigation to plain language",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T17:05:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faa47364cf04e89ac0d5a8a3eae7c10e862a27b6",
"body": "Mounts the editor view into a real window/canvas and asserts the\nstrip actually occupies rendered space and paints content once a\nsimulation starts, catching the exact clipped/zero-size failure mode\nthat v.root.Refresh() in onRun/onStop guards against.",
"is_bot": false,
"headline": "Add rendered regression test for running-devices strip visibility",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T16:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f802050631f7afe48dbaa66de3685d07244b6b69",
"body": "Adds Run/Stop controls and a running-devices strip to the scenario\neditor, migrating the runner lifecycle from the deleted Quickstart view.\nRun validates the document, serializes it via the editor's own\nscenariodoc.Document, and starts it through simrun; a scenario simrun\ncan't run gets plain-langua\n[…]\nted\"/\"Network\" text.\n\nboot.go wires the shared DeviceStore into the Simulator view and a\nPortHint callback so a running simulation's status includes a tip when\nthe current session port won't reach it.",
"is_bot": false,
"headline": "Consolidate Simulator Editor and Quickstart into one Simulator view",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T16:28:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2254edd4a45a4975952097d2e44f36bc0b5afa9a",
"body": "Settings now offers \"Automatic (recommended)\" plus each usable network\ninterface by human-friendly label instead of a raw text field, backed\nby a new netpick package. Bootstrap resolves Automatic to the best\nreal interface at start time, and Settings now restarts the live\nsession on save instead of requiring a relaunch, reporting plain\nconnected/failed status either way.",
"is_bot": false,
"headline": "Replace free-text network interface with a picked dropdown",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T15:58:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f40599dd7b440b7c90e9ba8ee70fc9a1095fb15",
"body": "AppShell embedded *fyne.Container directly, which only satisfies\nfyne.CanvasObject by method promotion; the driver's render-tree walk\nonly recognizes a concrete *fyne.Container or a fyne.Widget, so\nwindow.SetContent(shell) painted nothing. Make AppShell a real widget\n(widget.BaseWidget + CreateRende\n[…]\noot.Compose, the single\ncomposition root shared by main() and the new rendered regression\ntests, which capture the composed window's canvas and assert on\npainted pixels rather than the container tree.",
"is_bot": false,
"headline": "Fix blank AppShell rendering and add a composition root",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T15:40:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16d3c6a1743fa6c9a4857517e1f57b270b97683d",
"body": "Fix windows-arm64 GUI release builds",
"is_bot": false,
"headline": "Merge pull request #8 from zyra/release-arm64-fix",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:53:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "671833c4d5f0c638abf1f9a8c5d868c48b784c6d",
"body": "Install a pinned llvm-mingw aarch64 toolchain on the windows-11-arm\ngui-release leg so CGO doesn't fall back to the runner's x86 gcc,\nwhich can't assemble arm64 code. Also add a workflow_dispatch trigger\nthat re-runs only gui-validate/gui-release against an existing tag,\nso a failed GUI leg can be retried without cutting a new release.",
"is_bot": false,
"headline": "Fix windows-arm64 GUI release builds",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:49:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db51ce5dedec7782188c38401fe1d9a6d17efa36",
"body": "Fix GUI CI on Linux and macOS",
"is_bot": false,
"headline": "Merge pull request #7 from zyra/ci-fixes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-18T13:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62b26b5e8ad9d53b7b4e16f51d44546ec17b9330",
"body": "Two latent failures surfaced once the Windows leg ran to completion\n(it was previously cancelled early by fail-fast whenever macOS\nfailed):\n\n- TestSaveToUnwritableDirectoryFails assumed 0o555 on a directory\n blocks file creation; on Windows Unix permission bits don't, so\n skip it there like the ex\n[…]\n\n process-global text shaper - exactly the DATA RACE CI reported.\n Raise these waits to a generous 30s (a passing wait still returns\n immediately) in browser, discovery, quickstart and shell tests.",
"is_bot": false,
"headline": "Fix Windows-only GUI test failures",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:50:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ad812e28df9efdbdaa128f072a96b33c105f198",
"body": "CI confirmed the actual darwin failure once startup errors started\nsurfacing: \"listen udp4 127.255.255.255:PORT: bind: can't assign\nrequested address\". Unlike Linux, BSD-family kernels (including\ndarwin, which server_generic.go also serves) refuse to bind a UDP\nsocket directly to a directed-broadcas\n[…]\nputed broadcastAddr.\n\nAlso set fail-fast: false on gui-validate.yml's OS matrix so a\nfailure on one leg doesn't cancel the other two before they finish,\nwhich was hiding their actual pass/fail status.",
"is_bot": false,
"headline": "Bind the generic listen path's broadcast socket to the wildcard address",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:31:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1da428137f90353207ebce52d7ca9e9840b63e75",
"body": "bacnet.Server.Listen closes its Start() channel even when\nListenContext failed to bind (it calls markStarted() on the error\npath too), so Live.Start treated that close as unconditional success.\nA failed listener then surfaced later and confusingly, as \"server is\nnot listening\" from the first Send ca\n[…]\nnto the buffered Errors()\nchannel, so once Start() fires, a startup failure is guaranteed to\nalready be queued there. awaitStart checks for it non-blockingly and\nwraps it into the error Start returns.",
"is_bot": false,
"headline": "Surface bacnet listener startup errors from session.Live.Start",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8441c5e89f858d2755042bfcd4fa43752ce9c7b0",
"body": "ListenContext on this platform set binds two UDP sockets sharing one\nport: a unicast socket on the interface's address and a broadcast\nsocket on its directed-broadcast address (e.g. 127.0.0.1:p and\n127.255.255.255:p for loopback). SO_REUSEADDR alone covers this on\nLinux/FreeBSD, but they never reach\n[…]\nL.\n\nsetReusePort is split into its own file per GOOS subset because\nunix.SO_REUSEPORT isn't defined for solaris in the vendored\ngolang.org/x/sys/unix, which is otherwise part of this file's build\ntag.",
"is_bot": false,
"headline": "Set SO_REUSEPORT on the darwin/BSD generic listen path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e6e70db299d300e981254d09c9a2ab894a078bd",
"body": "go-gl/glfw v3.4 (pulled in by Fyne 2.8) needs wayland-client-core.h\nand xkbcommon headers to compile on Linux, so every Linux leg that\nbuilds the gui module now installs libwayland-dev and\nlibxkbcommon-dev alongside the existing GL/X11 dependencies.",
"is_bot": false,
"headline": "Install Wayland headers for Fyne builds on Linux CI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:26:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f2d949cf2607a900dfd1529f4490b525e32ab2",
"body": "Build and publish binaries for all desktop targets",
"is_bot": false,
"headline": "Merge pull request #6 from zyra/release-automation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530459d5280e9d60cb8780091396a4ea6dd805a5",
"body": "The upload step ran under PowerShell on the Windows runners, where the\nbash-only script fails; force bash for every run step in the job. The\nWindows images also expose python but not python3, so resolve whichever\nis on PATH for the zip and checksum steps. Bundle README.md alongside\nLICENSE to match the CLI packages, and document the augment-after-\npublish ordering of GUI asset uploads.",
"is_bot": false,
"headline": "Fix Windows legs of the GUI release job",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe9fbc0d6a1b30d6dfcdf58489bd6eac2c3ab8b1",
"body": "Add windows/arm64 to the CLI cross-compile matrix and a new gui-release\nmatrix job that builds gobac-gui natively on all six OS/arch runners\n(Fyne requires CGO, so it can't cross-compile from ubuntu). Each GUI\nleg uploads its own asset and checksum file to the release created by\nthe existing release job, gated by a fast Linux-only gui-validate job.",
"is_bot": false,
"headline": "Build and publish binaries for all desktop targets",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T23:04:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53dd7a7fa6f5850b1d0cf56584bd1876a7885397",
"body": "Add cross-platform GUI operator workstation",
"is_bot": false,
"headline": "Merge pull request #5 from zyra/gui-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a846d19c26884fdd0085e5bcb68f0ae161857ef",
"body": "Wire persisted interface/port settings into session.Start on launch\nand session.Stop on window close, instead of leaving Discovery,\nBrowser, and Quickstart hitting an unstarted session. The\nsettings-to-config mapping and start/stop wiring now live in a small\ntestable session.Starter seam with unit t\n[…]\nsettings\ndialog, and widen the GUI CI path filters to cover the parent library\npackages the module depends on via its replace directive, plus add a\nreachability probe to the macOS loopback alias step.",
"is_bot": false,
"headline": "Start and stop the BACnet session on launch/close",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:47:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "44db28e843760ba1f0796c1f4a65c50f69e156f1",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into gui-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8204e41a66001641f64a38dadf096f7942c24224",
"body": "Add Wave 1 client services and simulator realism",
"is_bot": false,
"headline": "Merge pull request #4 from zyra/lib-wave1",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T22:33:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f15397827c0ffb4c83f5b3b74c01f87793d86826",
"body": "Request.UnmarshalBinary and SubscribeCov.MarshalBinary returned their\nscratch buffer to the pool before resetting it. Go defers run LIFO,\nso the buffer went back into the pool while another goroutine could\nalready be writing to it, and the original goroutine's Reset() raced\nwith that write.\n\nReset now happens inside the same deferred closure as Put, so the\nbuffer is always cleared before it becomes visible to another Get().\n\nTest: go test -race -mod=vendor -count=20 ./bacnet",
"is_bot": false,
"headline": "Fix defer ordering race on pooled buffers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1697777cf7587e543dda461edb1377624a6ac19f",
"body": "Request.UnmarshalBinary and SubscribeCov.MarshalBinary returned their\nscratch buffer to the pool before resetting it. Go defers run LIFO,\nso the buffer went back into the pool while another goroutine could\nalready be writing to it, and the original goroutine's Reset() raced\nwith that write.\n\nReset now happens inside the same deferred closure as Put, so the\nbuffer is always cleared before it becomes visible to another Get().\n\nTest: go test -race -mod=vendor -count=20 ./bacnet",
"is_bot": false,
"headline": "Fix defer ordering race on pooled buffers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:15:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e28b8f63391fe0714067b29a0e808a5a3f988585",
"body": null,
"is_bot": false,
"headline": "Synchronize quickstart stop state with UI thread",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:06:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "256db6c38688dbfb1fb7d12971e4c22419bb14b9",
"body": null,
"is_bot": false,
"headline": "Synchronize quickstart runner state with UI thread on start",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T20:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bc155f7e597269880bc8b473c5a8c807ec18ffd",
"body": "internal/simrun runs a scenario's devices as loopback UDP BACnet/IP\nresponders, one goroutine each, and reports the OS-assigned port each\none actually bound. The Quickstart view decodes a bundled three-device\ndemo scenario, starts it, injects its devices into the shared device\nstore (Source \"local-s\n[…]\n the port it is itself\nconfigured with, so reading a quickstart device requires a session\nbound to that same port, and a same-port 127.0.0.1 device would\ncollide with the client's own loopback socket.",
"is_bot": false,
"headline": "Add in-process simulator quickstart",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:55:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80800d11eebf92ce7b7b10a9a00fe8de9bd5754c",
"body": null,
"is_bot": false,
"headline": "Repaint field hints when switching device or object selection",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:34:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a24f314de840385630c4f9d480dd22f84b6d8e4",
"body": "Full forms editor over scenariodoc.Document: open/save/save-as, a\nnetwork form, master-detail device and object editing (typed value\neditors per object type), and per-field validation feedback fed by\nscenariodoc.FieldErrors plus Document.Validate() gating the Save\nbutton. Mount it as the Simulator Editor nav entry.",
"is_bot": false,
"headline": "Add scenario editor UI with live validation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:32:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "effeb9574438d02fecf77ef0052ff196261aaca8",
"body": null,
"is_bot": false,
"headline": "Add scenario document layer with YAML/JSON round-trip guard",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0398bc3e5da0b1f69effc19ea24ff3fbae19e514",
"body": null,
"is_bot": false,
"headline": "Strengthen write-dialog test's device IP assertion",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T19:00:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad09627b2235d9c95cc841e65687082249f63f47",
"body": "Object tree from Object_List plus a property panel loaded via\nReadMultiple (one ReadSpec per property until RPM lands), with a\nwrite dialog for Present_Value. Extends the session facade to unwrap\nObjectId and BitString values and to wrap CharacterString writes, so\nthe browser never needs to import library wire types directly.",
"is_bot": false,
"headline": "Add RPM-based object browser with L1/L2 fallbacks",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a3496a211227924656de8ca94fdfcc7e4c3757",
"body": "Wire the Discovery nav entry to a real view: sweep/clear toolbar with\na duration selector, a device table bound to the DeviceStore, and row\nselection ready for the object browser to hook into. Sweeps run on a\ngoroutine and merge into the store as I-Ams arrive; the store listener\ndrives the table and\n[…]\nt label back on the Fyne thread.\n\nGive AppShell an exported SetView so the app entrypoint can swap the\nplaceholder Discovery label for the real view without changing the\nshell's constructor signature.",
"is_bot": false,
"headline": "Add discovery view with live sweep table",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:44:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2821aa91530ac47d8aae124540d1b16b007edcd1",
"body": "The client stack always sends to the port it listens on, so every\ndiscovered device is reachable at the session's own configured port.\nThread that port through DeviceSummary so callers can render a full\naddress without guessing it.",
"is_bot": false,
"headline": "Carry the listen port on discovered device summaries",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "344e3ed5a407cfd94ba825721ceffd4f919e5102",
"body": null,
"is_bot": false,
"headline": "Fix store package doc comment section reference",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:27:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb396d5bc020ca23265d51ed2ace5f63b2270f0f",
"body": null,
"is_bot": false,
"headline": "Add observable device/object store",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4be47a26fd086b1c85c44cc1a938101f52e34ffa",
"body": null,
"is_bot": false,
"headline": "Provision Windows loopback alias for GUI simulator tests in CI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71a948f0320b8574fd077be90c8464703e3e1139",
"body": null,
"is_bot": false,
"headline": "Un-skip session round-trip tests now that the library race is fixed",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b048f088d8d1d9ed324d4800342c736049efeae1",
"body": "Server.handle() re-read req.InvokeID() to release the invoke ID\nafter handing req to a client goroutine via deliverConfirmedHandler.\nThe client goroutine can concurrently Release() the request back to\nits sync.Pool, racing the reset against that read. Hoist the invoke\nID into a local before delivery\n[…]\nship\nhas transferred.\n\nAdds a regression test that drives the real dispatch path with a\nconsumer goroutine releasing the delivered request immediately,\nreproducing the race under -race before the fix.",
"is_bot": false,
"headline": "Fix data race on req after confirmed-handler delivery",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:11:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f898cd6d1ba36e7fe4079f6d0488849343a6323d",
"body": "Server.handle() re-read req.InvokeID() to release the invoke ID\nafter handing req to a client goroutine via deliverConfirmedHandler.\nThe client goroutine can concurrently Release() the request back to\nits sync.Pool, racing the reset against that read. Hoist the invoke\nID into a local before delivery\n[…]\nship\nhas transferred.\n\nAdds a regression test that drives the real dispatch path with a\nconsumer goroutine releasing the delivered request immediately,\nreproducing the race under -race before the fix.",
"is_bot": false,
"headline": "Fix data race on req after confirmed-handler delivery",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T18:08:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6b396000b1d51ef75f9dae0a02a51c3a0a478d75",
"body": "…fault",
"is_bot": false,
"headline": "Add simulator object realism: status, event state, OOS, relinquish de…",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:55:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c996af66eaaa7815c4674d891aba3d98d6b4ab8d",
"body": "Extend SubscribeCOV marshal/unmarshal with IssueConfirmed and\nLifetime/HasLifetime fields, add CovOptions and\nServer.SubscribeCovWithOptions so callers can request unconfirmed\nnotifications and an explicit or indefinite lifetime, and route\nunconfirmed COV notifications to the same per-device/process\nhandler confirmed notifications use so CovNotifier delivers both.\nExisting SubscribeCov/SubscribeCovWithProcessID keep emitting\nidentical bytes.",
"is_bot": false,
"headline": "Add unconfirmed and lifetime options to client SubscribeCOV",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0d3fd45dbdebb3003413b193e450e0f1b4e05b4",
"body": "Client can broadcast TimeSynchronization (choice 6) and\nUTCTimeSynchronization (choice 9) as fire-and-forget unconfirmed\nrequests. Simulator decodes both and records the synced date/time onto\nthe device's Local_Date and Local_Time properties, which stay unknown\nuntil the first sync.",
"is_bot": false,
"headline": "Add TimeSynchronization and UTCTimeSynchronization support",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73b00d593cc19b5c51cd11fcf45d8ebb8483ef3f",
"body": "TestStartStopLifecycle and startLiveAgainst hardcoded Config{Interface:\n\"lo\"}, which only exists on Linux (macOS uses \"lo0\", Windows something\nelse entirely) and made the non-skipped lifecycle test fail on the\nmacOS/Windows CI legs. Resolve the loopback interface by scanning\nnet.Interfaces() for a l\n[…]\nitigation,\nnot a resolution: the -race quarantine and the simulator's 127.0.0.2\nbind (forced by the library's shared-port addressing model, deviating\nfrom plan §6.7) still need a plan-owner amendment.",
"is_bot": false,
"headline": "Resolve loopback interface name per-OS in session tests",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:19:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "921d1ec1495b3a144934cca920f39faef82dfbc5",
"body": null,
"is_bot": false,
"headline": "Answer Who-Has broadcasts in the simulator",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:13:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef92eae6b96f84c7b682984bea70f21cd23b2e17",
"body": null,
"is_bot": false,
"headline": "Add client Who-Has/I-Have codec and broadcast",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:13:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce39fe355bb892b8241a211544727e20a5a51133",
"body": "Alias 127.0.0.2 on lo0 in the macOS CI leg so the simulator harness\ncan bind its distinct loopback address (macOS assigns only 127.0.0.1\nto lo0 by default).\n\nSkip the four round-trip session tests under -race: they reliably hit\na genuine data race inside bacnet/server.go (ReleaseInvokeID reads\nreq.I\n[…]\nbrary bug outside gui/'s scope, not something introduced here, and\nstill blocks the -race CI gate until it's fixed on the library side.\nNon-race runs still exercise the exact-value assertions in full.",
"is_bot": false,
"headline": "Fix macOS loopback binding and quarantine known library race",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T17:08:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6ac9d907ed14da138f897ff8c45afdb5f58d22be",
"body": null,
"is_bot": false,
"headline": "Add simulator WritePropertyMultiple handler with atomic writes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:58:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1b707a3621d90574a69a50df17b7b2ac55ebbb2",
"body": null,
"is_bot": false,
"headline": "Add WritePropertyMultiple client codec and error decoding",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e49a74c8a9a8b3dc7b923cc21cb2b24c02c670c5",
"body": "Introduce internal/session with a Session interface and Live\nimplementation that starts/stops the bacnet.Server listener, discovers\ndevices via Who-Is, and reads/writes object properties. Instance\nnumbers above 65535 are rejected with a pending-L2 error and\nReadMultiple falls back to sequential Read\n[…]\nvice scenario in-process and serves it\nover loopback UDP to exercise reads, a write-then-read-back round\ntrip, a write-access-denied error, the instance guard, and the\nstart/stop lifecycle end to end.",
"is_bot": false,
"headline": "Add session layer wrapping the BACnet client SDK",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:55:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbe4708290b85a204ff7780583c5aefbe3189a25",
"body": "Add ReadObjectProperty, WriteObjectProperty, and SubscribeCovObject\nthat accept a types.ObjectId with the complete 0..4194303 instance\nrange, delegating to the existing implementations. The CLI's\nreadprop/writeprop commands now parse and validate the full range\nand use the new methods.",
"is_bot": false,
"headline": "Expose full 22-bit object instances in client API and CLI",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687a8cce82ca58503521411d80b8cbf949f30884",
"body": "Adds the nested github.com/zyra/gobac/gui module (Fyne v2.8, replace\ndirective to the repo root), a runnable app shell with left navigation,\nswitching content stack, and status bar, plus a settings dialog for\ninterface/port persisted via app preferences. Adds the 3-OS gui-validate\nCI workflow.",
"is_bot": false,
"headline": "Scaffold gui module with app shell and settings dialog",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ae2b3744ff4f6fb69812687fc2b41be8b7d805",
"body": null,
"is_bot": false,
"headline": "Add client ReadPropertyMultiple",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T16:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "399ce016015c55e9278981bc320abc4acc05c52c",
"body": null,
"is_bot": false,
"headline": "Merge pull request #3 from zyra/pr2-review-fixes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-17T14:08:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd53b12be7f6fc6f1027c17c18e0c2f0cf86ae42",
"body": "Introduce three package-level seams (whoIsRequest in whois.go;\nobjectProperties and deviceObjects in scan.go) following the existing\nreadPropertyRequest/writePropertyRequest pattern, with zero behavior\nchange. Add five tests covering: 22-bit DeviceInstance sort/ordering\n(guards the 16->22-bit PR #2 fix), the no-devices-found error path,\nduration forwarding from the CLI context, whois-error propagation\nthrough Scan, and end-to-end object/property collection with JSON\noutput assertions.",
"is_bot": false,
"headline": "Add test coverage for whois.go and scan.go via seams",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:24:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36b5136b3a5c3cecd41070e2e885091a064890cb",
"body": "Locks in handleWhoIs range filtering (out-of-range, exact boundary,\nabove-range, and unlimited Who-Is) and the modelError error-class/code\nmapping (unknown object/property, non-array property, invalid array\nindex via Priority_Array, and value-out-of-range on WriteProperty)\nagainst real encoded wire payloads, plus a direct unit test for the\ndefault and two previously-unasserted modelError branches.",
"is_bot": false,
"headline": "Add assertion tests for Who-Is filtering and modelError mapping",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1527f9fbd877ee60f26ae1319f40e31fc533b0c0",
"body": "Locks in Property.Read array-index guards (non-array rejection, out-of-range\nindex, BacnetArrayAll escape hatch), Network.AddDevice guards (nil device,\nout-of-range id, duplicate id), applyScenarioDefaults defaulting (version,\nnetwork mode auto-selection, port inheritance, vendor/model/protocol\nrevision), objectTypeNumber normalization/rejection, and\nnormalizePresentValue's numeric-analog validation end-to-end through\nDecodeScenario.",
"is_bot": false,
"headline": "Add assertion tests for simulator model and scenario error branches",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:11:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59181ace80e47d87dd936797bbeb18adc0c03555",
"body": "…hesis\n\nProperty.PriorityArray() was dead code. Wire it into Device.ReadProperty:\nwhen a commandable object's Present_Value is read and identifier 87 isn't\nin the Properties map, synthesize a transient 16-slot array Property from\nthe live per-priority slots (unset slots as NULL) and reuse Property.R\n[…]\nndable objects so it isn't invisible to ReadPropertyMultiple.\n\nNo stored Property for 87 is kept (would go stale after writes) and\nRelinquish_Default (104) is intentionally not exposed - out of scope.",
"is_bot": false,
"headline": "Expose Priority_Array (87) for commandable objects via read-time synt…",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T23:05:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f30b3105121db1ad0460ec27eef55ce639701a79",
"body": "Errors from conn.ReadFromUDP() other than timeouts previously killed the\nreceive goroutine permanently, leaving the server looking healthy while no\nlonger receiving datagrams. Treat non-timeout errors as transient by\ndefault (report and continue); only exit on shutdown/cancellation or a\n\"use of clos\n[…]\nmpare against).\n\nNarrows receive()'s conn parameter to a new udpReader interface (just\nReadFromUDP) so the error-handling paths can be exercised with a scripted\nreader in tests, without a real socket.",
"is_bot": false,
"headline": "Survive transient UDP read errors in receive()",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:57:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6eff307c24d1fc133239753844d48e9606bf5be8",
"body": "server_generic.go (the darwin/windows path for the legacy bacnet.Server\nAPI) created its two sockets with plain net.ListenUDP, so broadcast\nWho-Is/I-Am sends failed there unlike the linux/freebsd path\n(server_posix.go) and the transport package's udp_unix.go/udp_windows.go,\nboth of which set SO_BROA\n[…]\n ListenContext now calls listenBroadcastUDP for both\nthe broadcast and unicast sockets. Add server_generic_listen_unix_test.go\nverifying SO_BROADCAST reads back set, compiled by darwin/windows go vet.",
"is_bot": false,
"headline": "Set SO_REUSEADDR/SO_BROADCAST on generic bacnet.Server listen path",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:51:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c2489c718bcb99130ef30c190b5ce2a369e0716",
"body": "The seed scenario field was parsed but never read anywhere, and the\nsimulator has no randomness (no math/rand import in any non-vendor\nfile). Its presence in the shipped example misleadingly implied\nseedable behavior. Remove the field, the example line, and the test\nfixture line, and lock the removal in with a strict-decoding\nregression test asserting that a scenario with a seed field is\nrejected as an unknown field.",
"is_bot": false,
"headline": "Remove dead Scenario.Seed field",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f2654c53f067f23d25a97c1d407941dc6d938df",
"body": "TestDecodeScenarioRejectsOverflowingPresentValue used tab characters\nto indent three fixture lines, which YAML rejects as a syntax error\nbefore DecodeScenario ever reaches the intended uint32-overflow\nvalidation. Replace the tabs with spaces so the fixture parses, and\npin the error message assertion to the \"exceeds the unsigned 32-bit\nrange\" substring so a regression to invalid YAML (or any unrelated\nerror) fails the test instead of passing for the wrong reason.",
"is_bot": false,
"headline": "Fix tab-indented YAML fixture in overflow test",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb3bb3ec915905b246e4e0b4c371a9658a65d081",
"body": "The test job's Test step invoked go test without -race, so the CI\nnever actually exercised the race detector despite the job claiming\nto. CGO defaults to 1 on ubuntu-latest with no override, so -race\nworks out of the box. cross-build job is untouched (CGO_ENABLED: 0,\nbuild-only, no tests).",
"is_bot": false,
"headline": "ci: run tests with -race in validate workflow",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T22:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47f694badff1fad21b4e00e8ff22ba519ebd7d8",
"body": null,
"is_bot": false,
"headline": "Update GitHub Actions runtimes",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T03:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f79f9b71339bdb00edf1c72b044cc98f8a05ff96",
"body": null,
"is_bot": false,
"headline": "Prepare v2 release automation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T03:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cba5aebe4dcfc145d89ed44203a48139a374985d",
"body": null,
"is_bot": false,
"headline": "Add MIT License to the project",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T02:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "138e59390359c90aeac313307be1edc17d5db324",
"body": "Refresh BACnet SDK and add simulator",
"is_bot": false,
"headline": "Merge pull request #2 from zyra/refresh",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T02:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1620ab22e0bea7ece122ff7ce86d2f929efdb4e9",
"body": null,
"is_bot": false,
"headline": "Tighten protocol and simulator validation",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5dad056bdc69e1ee6178f26e510aaa2ceff7da1",
"body": null,
"is_bot": false,
"headline": "Accept optional COV subscription fields",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a030cac27d16163ce0cb815838f5cceb381c1ea",
"body": null,
"is_bot": false,
"headline": "Support zero COV process identifiers",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43bfd49985e43740024aa18d9740d6e737d8ef0",
"body": null,
"is_bot": false,
"headline": "Tighten simulator edge cases",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cac58f5e9b2d1afa40f8a2d55a6494876eb9a7c8",
"body": null,
"is_bot": false,
"headline": "Reject trailing scenario data",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b8b4e2f6cdcc27b66fafdac4078d3a0e58d07a",
"body": null,
"is_bot": false,
"headline": "Preserve COV API compatibility",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "882d29aa6e677b1e821358c588871e1e3e199c73",
"body": null,
"is_bot": false,
"headline": "Reset pooled device state",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:33:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b50782be42e49fbdd997e5760a903bc7400774f5",
"body": null,
"is_bot": false,
"headline": "Add BACnet network simulator",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cde9562fdadb26ed68df7ebf59b277ecb3f7892",
"body": null,
"is_bot": false,
"headline": "Support simulator UDP broadcasts",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8743a64efc5c35f172392b8cb53df818e523d119",
"body": null,
"is_bot": false,
"headline": "Add BACnet responder transport",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:22:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "577283c5dd33d8f902cabc9835cc794323659402",
"body": null,
"is_bot": false,
"headline": "Stabilize BACnet protocol lifecycle",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:22:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c4525235230b1299920224621917e87c78ea6bc",
"body": null,
"is_bot": false,
"headline": "Harden BACnet wire codecs",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:04:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3859a8b5a2e61bb3a4f2120843f5b7fe320ea2c4",
"body": null,
"is_bot": false,
"headline": "Restore project validation baseline",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2026-07-16T00:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be4803a55cec577f8517192ce5043f23cdab53f6",
"body": null,
"is_bot": false,
"headline": "update bacnet",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2021-03-13T02:56:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c14babdc034143fab54d53398a51621ad58f990",
"body": null,
"is_bot": false,
"headline": "export internal functions",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-12-08T07:59:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75e6428cd09c2ae377c63e31986fb760b472bfc9",
"body": null,
"is_bot": false,
"headline": "chore: build for mips archs",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-03-10T15:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b2bffc88273664df0050e85e16ba6e621c36ce",
"body": null,
"is_bot": false,
"headline": "update dependencies",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2020-01-16T18:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "576d0d0b28097e4396579248cf9288e6ce367db2",
"body": null,
"is_bot": false,
"headline": "await build steps",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fea87fef4f781b975ee917c5696e02a0e4f2542",
"body": null,
"is_bot": false,
"headline": "output binaries to shared volume",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f486c1f51d5c3ebdf2958da466da82aab04b085b",
"body": null,
"is_bot": false,
"headline": "update secret name",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd1b3f135b3f61f12af8212e7af5c6bf8b02171e",
"body": null,
"is_bot": false,
"headline": "gh release",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce63dd9f3f19cc27cb922461b9dbc5274537086d",
"body": null,
"is_bot": false,
"headline": "fix mount paths",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:41:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f13f3f06894762518532853ff40275770c8376b",
"body": null,
"is_bot": false,
"headline": "add missing images",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:40:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abd1ce61a48e225d0da802b39f15b4af5f13f865",
"body": null,
"is_bot": false,
"headline": "build in docker and release to GH",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:39:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e10f12c5e9167212e712a64b1f3ae448354a29",
"body": null,
"is_bot": false,
"headline": "delete Jenkinsfile",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dbcaae2f89424bcbf5126038491b5fcbea0bce0",
"body": null,
"is_bot": false,
"headline": "test config",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:13:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e08d483f855f867c6b62ce416476c65430957a4",
"body": null,
"is_bot": false,
"headline": "depend on other pipelines",
"author_name": "Ibby Hadeed",
"author_login": "ihadeed",
"committed_at": "2019-10-23T14:11:31Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 86,
"latest_release_at": "2026-07-18T21:14:47Z",
"latest_release_tag": "v2.2.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 1,
"days_since_latest_release": 3,
"mean_days_between_releases": 273.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/zyra/gobac/v2",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/zyra/gobac/v2",
"is_deprecated": false,
"latest_version": "v2.2.0",
"repository_url": "https://github.com/zyra/gobac",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T21:13:05Z",
"latest_version_yanked": null,
"days_since_latest_publish": 3
},
{
"name": "github.com/zyra/gobac",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/zyra/gobac",
"is_deprecated": false,
"latest_version": "v1.5.9",
"repository_url": "https://github.com/zyra/gobac",
"versions_count": 20,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2021-03-13T02:56:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1957
}
]
},
"popularity": {
"forks": 0,
"stars": 1,
"watchers": 2,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2019-10-09",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_stars": 1
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"gui/go.mod",
"vendor/github.com/urfave/cli/go.mod",
"vendor/gopkg.in/yaml.v2/go.mod"
],
"largest_source_bytes": 43938,
"source_files_sampled": 170,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"gui/go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/urfave/cli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20190405154228-4b34438f7a67"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.2"
},
{
"name": "fyne.io/fyne/v2",
"manifest": "gui/go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.0"
},
{
"name": "github.com/zyra/gobac/v2",
"manifest": "gui/go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 9,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ihadeed",
"commits": 184,
"avatar_url": "https://avatars.githubusercontent.com/u/13794420?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"gui-validate.yml",
"release.yml",
"validate.yml"
],
"has_docs_dir": true,
"linter_configs": [
".flake8"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/7 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "60082a53f852711389dc53c94011bfe23d3d4cda",
"ran_at": "2026-07-22T04:33:18Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T21:35:51Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-18T21:27:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/zyra/gobac",
"host": "github.com",
"name": "gobac",
"owner": "zyra"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 40,
"vitality": 69,
"community": 24,
"governance": 61,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 86,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "86 commits in the last year",
"points": 17.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 86
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v2.2.0",
"releases_from_tags": false,
"days_since_latest_release": 3,
"mean_days_between_releases": 273.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~273.4 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 273.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 3,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 3 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 3
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 1,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 9,
"open_issues": 0,
"closed_issues": 1,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "9/9 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 9,
"decided": 9
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"followers": 3,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "zyra",
"public_repos": 20,
"account_age_days": 3809
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of zyra",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "zyra"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "20 public repos, account ~10 yr old",
"points": 21.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 20
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/zyra/gobac/v2",
"github.com/zyra/gobac"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 3
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 3 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 3
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "20 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 20
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".flake8",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.54,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod",
"gui/go.mod",
"vendor/github.com/urfave/cli/go.mod",
"vendor/gopkg.in/yaml.v2/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod, gui/go.mod, vendor/github.com/urfave/cli/go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".flake8",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 43938,
"source_files_sampled": 170,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/170 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 170,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T04:33:33.735936Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/z/zyra/gobac.svg",
"full_name": "zyra/gobac",
"license_state": "standard",
"license_spdx": "MIT"
}