01 · Roasts
The Spec Whisperer
Three public repos, zero tests, zero CI, zero licenses. You author cryptography specifications for a living yet your own GitHub reads like a draft folder that never got reviewed.
56 PRs, 2 Commits
You fired off 56 external pull requests this year but managed only 109 commits total — meaning you contribute more to other people's repos than your own. Your public portfolio is essentially a ghost town with a 'closed for renovations' sign.
staleRepoRatio: 1.0
Every single public repo you own was last pushed more than 2 years ago. That's not a graveyard, that's a sealed tomb. The most recent push is a 2-commit spec explainer from 2023 that has been silent since.
161 Followers, 0 Following
You have 161 followers and follow exactly zero people. That's not networking, that's broadcasting into the void from a locked account. GitHub is a social platform, not a bulletin board.
JavaScript Monoculture
94% JavaScript across all repos, with CSS at 5% picking up the scraps. For someone who chairs cryptography standards and leads security teams, the public repo diversity suggests the real work never makes it past the firewall.
Built using
Zoral
Shadows one worker for a week, then takes over their job with zero extra setup. Behaves exactly like the original.
zoral.ai
02 · Category breakdown
- Impact25% weight20F
- Consistency20% weight35F
- Quality20% weight33F
- Depth15% weight20F
- Breadth10% weight25F
- Community10% weight50D
03 · Stats
365-day commit heatmap
101 active days
Language distribution
- JavaScript94%
- CSS5%
- HTML0%
- Other1%
04 · Numbers
Owned repos
non-fork
5
Commits
last 12 months
109
Followers
161
Joined GitHub
Jul 2011
05 · Top repos
twiss /
hcs
Experimental draft specification for HTTPS Content Signing with minimal adoption (6 stars, no forks, last push 2017). Contains specification, example code, and OpenSSL config but lacks tests, CI, license, and meaningful implementation maturity.
twiss /
source-code-transparency
Early-stage proposal repo (2 KB, 2 commits in 1 day) presenting a web security mechanism concept via explainer. No tests, CI, license, or executable code—purely a specification document.
twiss /
hcs-hardcoded-hashes
Minimal data dump containing hardcoded SSL certificate hashes for HCS plugins. 1 KB static file, no tests, no docs, no license, last touched in 2016 with only 4 of last 30 commits sampled.
06 · Timeline
- Jul 11, 2011Joined GitHub
- Sep 10, 2014Created hcs — Documents related to HTTPS Content Signing
- Oct 23, 2014Created hcs-hardcoded-hashes — Hardcoded hashes for use in HCS plugins, as an alternative for hashes included in the website's certificate
- Sep 24, 2023Created source-code-transparency — Source Code Transparency
- Sep 25, 2023Most recent push to source-code-transparency
07 · Compare
08 · Rubric
How this score was produced
Overall = Σ (category × weight) + gentle top-end curve
Tier thresholds
▸ How the pipeline works
- 01Scrape.Pull every non-fork repo pushed in the last 90 days, plus your contribution calendar, followers, and language byte counts — straight from GitHub's REST & GraphQL APIs.
- 02Triage.A small model reads every repo's file tree + README and picks the 20 files per repo that actually reveal how you code.
- 03Grade each repo. All repos run in parallel through a fast scoring model that reads the picked files and rates each one independently on Impact, Quality, and Depth — with evidence citations.
- 04Aggregate. A larger reasoning model combines the per-repo scores with server-computed stats (heatmap, commit cadence, language entropy, follower count) to produce the 6-dimension profile score + roasts.
- 05Correct.Deterministic server-side checks enforce anchor-scale floors (e.g. a profile with 2,000+ public commits can't score 30 Consistency) and recompute the final verdict.
~90 seconds per profile, ~$0.25 in compute. Total of ~240 files read across your top-12 repos. One rating per GitHub account per day.
▸ Data sources & caveats
- Heatmap & commit totals: GitHub GraphQL
contributionsCollection— covers the last 365 days, includes private repos when the user has opted in (default). - Language %: byte totals across the top 30 owned non-fork repos.
- Curve: a small upward nudge centered on raw score ≈ 70, capping at 100. Prevents specialists from being unfairly penalised for narrow breadth.
- Anchor corrections: when server-measured signals (e.g. privateWorkLikely, multiRepoVolume, follower count) mandate a minimum category score, the aggregation step enforces it. These are signal-conditional, not identity-based floors.