{"id":51719056,"url":"https://github.com/zhyd1997/oss-criticality-radar","last_synced_at":"2026-07-17T07:39:29.882Z","repository":{"id":371247913,"uuid":"1299912479","full_name":"zhyd1997/oss-criticality-radar","owner":"zhyd1997","description":"Note: vibe coded with Grok 4.5 high.","archived":false,"fork":false,"pushed_at":"2026-07-15T14:39:46.000Z","size":163,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-07-17T07:39:28.879Z","etag":null,"topics":["grok-45","open-source","oss"],"latest_commit_sha":null,"homepage":"https://oss-criticality-radar.vercel.app","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zhyd1997.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null},"funding":{"github":"zhyd1997","buy_me_a_coffee":"zhyd1997","patreon":null,"open_collective":"softmaple","polar":"softmaple","ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"otechie":null,"lfx_crowdfunding":null,"custom":null}},"created_at":"2026-07-14T02:12:14.000Z","updated_at":"2026-07-15T14:42:05.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/zhyd1997/oss-criticality-radar","commit_stats":null,"previous_names":["zhyd1997/oss-criticality-radar"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/zhyd1997/oss-criticality-radar","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhyd1997%2Foss-criticality-radar","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhyd1997%2Foss-criticality-radar/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhyd1997%2Foss-criticality-radar/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhyd1997%2Foss-criticality-radar/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zhyd1997","download_url":"https://codeload.github.com/zhyd1997/oss-criticality-radar/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhyd1997%2Foss-criticality-radar/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35573734,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-17T02:00:06.162Z","response_time":116,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["grok-45","open-source","oss"],"created_at":"2026-07-17T07:39:29.284Z","updated_at":"2026-07-17T07:39:29.867Z","avatar_url":"https://github.com/zhyd1997.png","language":"TypeScript","funding_links":["https://github.com/sponsors/zhyd1997","https://buymeacoffee.com/zhyd1997","https://opencollective.com/softmaple","https://polar.sh/softmaple"],"categories":[],"sub_categories":[],"readme":"# OSS Criticality Radar\n\nWeb UI for the [OpenSSF Criticality Score](https://github.com/ossf/criticality_score). Paste a GitHub repository (`owner/repo` or full URL) to see its criticality score and signal breakdown — no need to run:\n\n```bash\ncriticality_score -depsdev-disable https://github.com/owner/repo\n```\n\nScores range from **0** (least critical) to **1** (most critical), using Rob Pike’s weighted arithmetic mean with zipfian normalization and the default OpenSSF weights.\n\n## Features\n\n- Accepts `owner/repo`, `github.com/owner/repo`, or `https://github.com/owner/repo`\n- Scores via the official OpenSSF `criticality_score` CLI (**deps.dev disabled**)\n- Overall score plus per-signal breakdown\n\n## Setup\n\n### 1. Install dependencies\n\n```bash\npnpm install\n```\n\n### 2. Configure environment\n\n```bash\ncp .env.example .env.local\n# Edit .env.local:\n#   GITHUB_AUTH_TOKEN=...          # used by score-service / CLI\n#   SCORE_SERVICE_URL=http://localhost:8080\n#   SCORE_SERVICE_TOKEN=dev-shared-secret\n```\n\nCreate a [GitHub personal access token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token) with read access to public repositories. Without it, the CLI hits strict rate limits.\n\n`SCORE_SERVICE_URL` is **required** for the Next.js app. `SCORE_SERVICE_TOKEN` must match the token configured for score-service (Bearer auth on `POST /score`).\n\n### 3. Start the score-service backend\n\n```bash\ncd score-service\ndocker compose up --build\n```\n\nCompose loads `../.env.local` for `GITHUB_AUTH_TOKEN` and `SCORE_SERVICE_TOKEN`.\n\n### 4. Run the Next.js dev server\n\n```bash\npnpm dev\n```\n\nOpen [http://localhost:3000](http://localhost:3000).\n\n## API\n\nThe `url` field accepts a full GitHub URL or `owner/repo` shorthand:\n\n```http\nPOST /api/score\nContent-Type: application/json\n\n{ \"url\": \"softmaple/softmaple\" }\n```\n\n```http\nPOST /api/score\nContent-Type: application/json\n\n{ \"url\": \"https://github.com/softmaple/softmaple\" }\n```\n\nOr:\n\n```http\nGET /api/score?url=softmaple/softmaple\n```\n\n```http\nGET /api/score?url=https://github.com/softmaple/softmaple\n```\n\nThe BFF proxies to score-service, parses CLI JSON, and returns the UI shape:\n\nExample fields: `score`, `partial`, `unavailableSignals`, `repo`, `signals`, `contributions`.\n\n- If commit-search mentions are unavailable, `github_mention_count` is `null`, `partial` is `true`, and that weight-2 signal is **excluded** from the mean (not treated as zero).\n- Responses are cached in-process for 15 minutes per `owner/name`.\n- Basic per-IP rate limiting protects the backend (10 req/min).\n\n## Tests\n\n```bash\npnpm test\n```\n\n## How scoring works\n\nScoring is performed by OpenSSF’s CLI inside Docker. The frontend maps CLI output into a signal table using the same default / `original_pike` weights:\n\n| Signal | Weight | Max | Notes |\n|--------|-------:|----:|-------|\n| created_since (months) | 1 | 120 | |\n| updated_since (months) | 1 | 120 | smaller is better |\n| contributor_count | 2 | 5000 | |\n| org_count | 1 | 10 | top contributors’ companies |\n| commit_frequency | 1 | 1000 | commits/week over last year |\n| recent_release_count | 0.5 | 26 | last year |\n| updated_issues_count | 0.5 | 5000 | last 90 days |\n| closed_issues_count | 0.5 | 5000 | last 90 days |\n| issue_comment_frequency | 1 | 15 | last 90 days |\n| github_mention_count | 2 | 500000 | commit search for `owner/repo` |\n\n**Note:** deps.dev dependent counts are not used (same as `-depsdev-disable`).\n\n## Stack\n\n- [Next.js](https://nextjs.org) (App Router) BFF\n- [OpenSSF Criticality Score](https://github.com/ossf/criticality_score) CLI (Go, Docker)\n- TypeScript\n- Tailwind CSS\n\n## License\n\nThis project’s code is independent of OpenSSF’s repository; the scoring methodology is from [ossf/criticality_score](https://github.com/ossf/criticality_score) (Apache-2.0).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzhyd1997%2Foss-criticality-radar","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzhyd1997%2Foss-criticality-radar","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzhyd1997%2Foss-criticality-radar/lists"}