01 · Roasts
The Ghost of GitHub 2017
Your last commit was September 2017 — that's 7+ years of absolute silence. The heatmap is 52 straight weeks of zeros. You didn't abandon GitHub; you ghosted it.
Security Hazard Museum
iptools.php features command injection in ping.php and unsafe shell_exec in whois.php. You've been shipping CVEs, not code. At least it has 2 stars — presumably from people who didn't read it.
One File, No Tests, Ship It
pwgen is a single flat script with hardcoded password length and low-entropy random selection. No tests, no CI, no license. You wrote a password generator that you can't verify actually generates good passwords.
Release Day Retirement Plan
apachetop has exactly one commit — its creation day. You published a release, then immediately retired. That's not open source, that's a drive-by drop.
29 Repos, 7 Stars Total
After 15 years on GitHub with 29 public repos, you've accumulated 7 stars combined. That's 0.47 stars per repo per 15 years. The math is not in your favor.
Built using
Zoral
Shadows one worker for a week, then takes over their job with zero extra setup. Behaves exactly like the original.
zoral.ai
02 · Category breakdown
- Impact25% weight15F
- Consistency20% weight5F
- Quality20% weight24F
- Depth15% weight20F
- Breadth10% weight55D
- Community10% weight25F
03 · Stats
365-day commit heatmap
0 active days
Language distribution
- PHP44%
- Shell22%
- C++14%
- JavaScript6%
- Makefile4%
- Vim Script3%
- Other7%
04 · Numbers
Owned repos
non-fork
14
Commits
last 12 months
0
Followers
27
Joined GitHub
Apr 2009
05 · Top repos
HostOnNet /
pwgen
A minimal, one-file password generator utility with 1 star, no tests/CI, untyped code, and last commit in 2017. Works as intended but lacks structure and maintenance.
HostOnNet /
apachetop
Abandoned Apache log monitoring tool (v0.12.6) from 2016 with minimal adoption (1 star), no tests, no CI, and sparse documentation. Last commit same day as creation; pure one-off release.
HostOnNet /
iptools
Abandoned hobby PHP toolbox (~6KB, 2 stars) from 2010-2016 with critical security flaws: command injection in ping.php, unsafe shell exec in whois.php, no tests/CI/license, and obsolete YouTube downloader.
06 · Timeline
- Apr 26, 2009Joined GitHub
- Feb 11, 2010Created iptools — iptools
- Dec 27, 2015Created pwgen — Generate Secure Password in python https://blog.hostonnet.com/python-pwgen
- May 19, 2016Created apachetop
- Jul 3, 2017Most recent push to pwgen
07 · Compare
08 · Rubric
How this score was produced
Overall = Σ (category × weight) + gentle top-end curve
Tier thresholds
▸ How the pipeline works
- 01Scrape.Pull every non-fork repo pushed in the last 90 days, plus your contribution calendar, followers, and language byte counts — straight from GitHub's REST & GraphQL APIs.
- 02Triage.A small model reads every repo's file tree + README and picks the 20 files per repo that actually reveal how you code.
- 03Grade each repo. All repos run in parallel through a fast scoring model that reads the picked files and rates each one independently on Impact, Quality, and Depth — with evidence citations.
- 04Aggregate. A larger reasoning model combines the per-repo scores with server-computed stats (heatmap, commit cadence, language entropy, follower count) to produce the 6-dimension profile score + roasts.
- 05Correct.Deterministic server-side checks enforce anchor-scale floors (e.g. a profile with 2,000+ public commits can't score 30 Consistency) and recompute the final verdict.
~90 seconds per profile, ~$0.25 in compute. Total of ~240 files read across your top-12 repos. One rating per GitHub account per day.
▸ Data sources & caveats
- Heatmap & commit totals: GitHub GraphQL
contributionsCollection— covers the last 365 days, includes private repos when the user has opted in (default). - Language %: byte totals across the top 30 owned non-fork repos.
- Curve: a small upward nudge centered on raw score ≈ 70, capping at 100. Prevents specialists from being unfairly penalised for narrow breadth.
- Anchor corrections: when server-measured signals (e.g. privateWorkLikely, multiRepoVolume, follower count) mandate a minimum category score, the aggregation step enforces it. These are signal-conditional, not identity-based floors.