近况
过去一年的公开记录：GitHub 贡献、合并的 PR 与正在做的事。工作主要围绕 YakSSA 的 SSA 前端与并发编译、SyntaxFlow 的规则扫描与风险分级，以及 Muxterm 的 macOS 端；数据在站点构建时从 GitHub 获取，只包含公开仓库。
2,921近一年贡献
216合并 PR
2开放 PR
7活跃仓库
近一年还整理了 5 篇技术文档，见 文章索引。
贡献
2025.11.03 — 2026.11.03 · 共 2,921 次
12月1月2月3月4月5月6月7月8月9月10月11月
颜色越深，当天贡献越多少 多
做的事情
按月、按项目 · 近一年 216 个合并 PR
2026.11
1 个 PR · 1 个项目
yaklang/javajive1
2026.10
13 个 PR · 3 个项目
yaklang/yaklang9
- 10.23perf(syntaxflow): share one source pre-scan across rules已合并
- 10.22enhance(syntaxflow): 校正无数据流证明规则的严重度等级已合并
- 10.22feat(ssa): compile units concurrently without sharing another worker's builder已合并
- 10.20fix(go2ssa): compile corpus fixtures without production excludes已合并
- 10.16Feature/syntaxflow/support risk cover by next step已合并
- 10.15ci: prevent cancelled workflows from queueing tail jobs and add missing PR concurrency controls已合并
- 10.13fix(ssa): close frontend IR gaps in capture, loops, and constants已合并
- 10.10fix(go2ssa): 正确解析多层嵌入字段及指针别名已合并
- 10.09fix(ssa): 多语言 SSA 成员/指针副作用修复与 yakgrpc 补全缓存并发修复已合并
yaklang/gorm1
- 10.22Enhance/perf/create in batches已合并
2026.09
43 个 PR · 3 个项目
yaklang/yaklang36
- 09.29fix(syntaxflow): cut high-frequency builtin source-rule false positives已合并
- 09.28feat(syntaxflow): add builtin rules for missing checks已合并
- 09.28enhance(ssa): large-project compile and scan fixes已合并
- 09.24feat(scannode): Legion SSA IR 清理与 Protobuf 节点消息已合并
- 09.24fix(syntaxflow): 源码检测独立于 SSA 编译并修复并行结果记录已合并
- 09.24ci(diff-code-check): publish findings to code scanning via SARIF已合并
- 09.22fix(sarif): make alert identity stable (category, ruleId) and render rule markdown已合并
- 09.22perf(ssaapi): reproducible, bounded object/member dataflow on large projects已合并
- 09.22ci(syntax-g4): normalize the corpus test trigger and driver names已合并
- 09.22fix(sarif): emit GitHub-uploadable code scanning results已合并
- 09.20fix(ci): pick any alpha/beta yak build in diff-code-check已合并
- 09.20fix(syntaxflow): keep ScanProject stages monotonic and split inspect/analyze已合并
- 09.20fix(ssa): keep zip/jar code sources out of live directory walking已合并
- 09.17feat(syntaxflow): product scan stages, skipped stages, and compile scale已合并
- 09.16ci(essential-tests): 降低假失败率、缩短关键路径并加固收尾环节已合并
- 09.15feat(syntaxflow): unify ScanProject entry and add mode-aware source/struct rules已合并
- 09.14fix(ci): chmod downloaded yak binary before probing已合并
- 09.12feat(ssa): compile-unit LazyBuild and struct-mode SyntaxFlow scan已合并
- 09.11fix(ssa): source-scan git workdir cleanup and attempt_lease_expired已合并
- 09.11fix(cli): skip database init for help commands and harden binary probe已合并
- 09.11ci(essential-tests): cache sharing, suite parallelism, G4 split, commit-status markers已合并
- 09.09feat(syntaxflow): add C#/.NET builtin security rules已合并
- 09.09enhance(syntaxflow): add golang cms builtin rule coverage已合并
- 09.08feat(syntaxflow): add spring cve generic rules and regression tests已合并
- 09.08feat(cli/ci): add verify-builtin-risk command and prefer published yak in embed/verify CI已合并
- 09.08feat(syntaxflow): migrate more source rules and enrich descriptions已合并
- 09.07feat(cli/ci): generate embed FS hashes and rule versions from the checkout已合并
- 09.04fix(ssa,python): repair ANTLR static-state races and scan compile-unit imports textually已合并
- 09.04fix(windows): reduce Defender-sensitive default behavior已合并
- 09.03fix: 热加载管理 修复 重命名会把Tags 置空的bug已合并
- 09.03feat(fuzztag): add jpg:jfif/jpg:exif and tiff:mm/tiff:ii variant tags已合并
- 09.03fix(codec): add CFB/OFB modes to AES symmetric encrypt/decrypt已合并
- 09.03fix(startup): defer SSA stats callbacks and license init to actual use已合并
- 09.02fix(ssa): cap dataflow path enumeration to prevent scan hang已合并
- 09.01fix(ssa): stabilize source precheck and scan node artifact flow已合并
- 09.01fix(lowhttp): enforce advertised h2 max frame size已合并
wlingze/muxterm6
- 09.23fix(runtime): stabilize Herdr rendering and finish pane layout across frontends已合并
- 09.23feat(update): release CI and one-click client updates已合并
- 09.21feat(branding): add official Muxterm logo已合并
- 09.20feat(frontend): unify workspace navigation and stabilize terminal rendering已合并
- 09.18refactor: collapse Muxterm to one crate and close Core/frontend boundaries已合并
- 09.08feat(herdr): runtime workspace identity and unified settings UI已合并
yaklang/javajive1
2026.08
31 个 PR · 3 个项目
yaklang/yaklang17
- 08.30feat(syntaxflow): context-aware regex for semgrep rule compatibility已合并
- 08.28feat(syntaxflow): source-mode risks carry full file context and scan-mode marker已合并
- 08.28fix(scannode): bound live debug query cost on long runs已合并
- 08.27fix(webfuzzer): identify HTTPFlow body download by HiddenIndex已合并
- 08.27fix(mitm): 规则未命中时不再误打 [规则修改] 标记已合并
- 08.27fix(ssa): code scan hang / progress / debug for Legion已合并
- 08.27feat(syntaxflow): extend sfpattern for source-mode scanning已合并
- 08.26fix(cve): send download progress without repeating status logs已合并
- 08.21fix(scannode): verify rule snapshot hash against raw wire items已合并
- 08.19fix(ssa): guard debug setup panics and foreach nil iterable已合并
- 08.14fix(ssadb): silently dedup duplicate ir_codes/ir_offsets before creating unique index已合并
- 08.14feat(ssa2llvm): link-time yaklib pruning with prebuilt core/net/staticanalyze runtime tiers已合并
- 08.14perf(ssa): reduce large-project scan cost and harden async persistence已合并
- 08.11feat(scannode): support Legion scan debug pprof collection and analysis已合并
- 08.07Fix/ssa/compile instruction stability已合并
- 08.04Feature/ssa/support pprof已合并
- 08.03Feature/ssa/multi member relations已合并
wlingze/muxterm12
- 08.30fix(linux): stabilize tmux and Herdr rendering已合并
- 08.26fix(macos): stabilize tmux Surface rendering and control flow已合并
- 08.26feat(runtime): add Herdr runtime support with Catalog facade已合并
- 08.20feat(dogfood): Linux/macOS dogfooding with QuickConnect attach UI已合并
- 08.10feat(tui): rebuild modern TUI with ratatui and standardize build outputs已合并
- 08.08feat(macos): command palette, detach, debug logging, and terminal query/resize fixes已合并
- 08.08fix(tui,linux): forward terminal query replies and sync resize已合并
- 08.04fix(macos): 签名/PATH/去重 + CI 改 DMG + CLI-TUI-GUI 子命令已合并
- 08.04test/feat: 流式输出测试基建 + 修复 SSH transport 多个 bug已合并
- 08.02ci: run validation only on pull requests已合并
- 08.01ci: unified release workflow for macOS and Linux artifacts已合并
- 08.01feat: add SSH shell and tmux runtime paths已合并
yaklang/yakit2
- 08.28fix(webfuzz): 下载 Body 按 HiddenIndex 定位 HTTPFlow已合并
- 08.21fix: 审计项目重编译时页面崩溃问题 已合并
2026.07
26 个 PR · 4 个项目
yaklang/yaklang13
- 07.31feat(httpflow): always include builtin tags in HTTPFlowsFieldGroup已合并
- 07.31Feature/ssa2llvm/clear code yaklib已合并
- 07.29fix(yakgrpc): upgrade mockey for Go 1.26 and fix printf ellipsis已合并
- 07.23enhance(db): gorm CreateInBatches + SQLite performance optimizations已合并
- 07.22refactor(db): migrate from jinzhu/gorm to yaklang/gorm已合并
- 07.20fix(antlr): fix doc generation after antlr dependency migration已合并
- 07.20refactor(antlr): upgrade ANTLR runtime from 4.11.1 to 4.13.2已合并
- 07.14perf(ssaapi/diagnostics): 大型项目扫描优化 part1已合并
- 07.13Fix/coreplugin/score based language detect已合并
- 07.10feat(aispec): add Responses subset types and Chat↔Responses converts已合并
- 07.10Large-project SyntaxFlow scan: memory + hang fixes (incl. SSA compile-unit refactor)已合并
- 07.08SSA compile-unit step refactor: stream compile by units, step-mode default已合并
- 07.02feat(reactloop): unify audit workspace attachments for skill audit and code audit 已合并
wlingze/muxterm9
- 07.28fix(macos): flatten UI chrome and harden hang/memory lifecycle已合并
- 07.27feat(linux): GTK 前端集成测试 — 2tab3pane + Ctrl+D + 键盘模拟 + CI已合并
- 07.25feat(macos): macOS 原生客户端、分屏修复与 XCUITest已合并
- 07.24feat: 全平台架构 — C ABI 导出 + TUI/GTK4 走 FFI + 三平台技术调研已合并
- 07.24feat: TmuxBackend 完整支持 — daemon 架构 + attach/detach + 四种模式已合并
- 07.22fix: CLI/TUI bug 修复 + daemon session 架构已合并
- 07.22feat: CLI 命令集 + Tab 层级重构已合并
- 07.21feat: 三层架构重构 (Backend → TerminalModel → Platform)已合并
- 07.21docs: add Chinese README已合并
yaklang/gorm2
yaklang/yakit2
2026.06
10 个 PR · 2 个项目
yaklang/yaklang9
- 06.30Fix/yakdoc skip test files已合并
- 06.25enhance(ssa): 用 LazyBuild / DeferredBuild 替代二次 AST 遍历，降低编译期内存占用已合并
- 06.23fix(syntaxflow): validate and repair builtin rule markdown formatting已合并
- 06.23refactor(yak): extract yakscript package and delegate ssa_compile/yakgrpc execution已合并
- 06.15Feature/ssa2llvm/shrink libyak size已合并
- 06.12fix(ssa): flush dbcache close during large project compile已合并
- 06.11feat(httpflow): expose builtin tag metadata in HTTPFlowsFieldGroup已合并
- 06.11Feature/ssa/support lazybuilder timelog已合并
- 06.05Feature/ssa2llvm/support yakplugin type已合并
yaklang/yakit1
2026.05
18 个 PR · 2 个项目
yaklang/yaklang16
- 05.29fix(consts): log sqlite large-db tune at most once per db path已合并
- 05.29Feature/reactloops/repport generating mark report path已合并
- 05.29feat(yakgrpc): persist wire HTTP response for History bare view已合并
- 05.29Ci/linux manylinux2014 glibc217已合并
- 05.29feat(grpc): add UrlWithoutQuery to ExtractUrl response已合并
- 05.28Feature/ssa2llvm/support coreplugin已合并
- 05.26fix(yak2ssa): skip unhandled-error when multi-value call is only return 已合并
- 05.25fix(java2ssa): avoid infinite loop in JSP javascript href preprocess已合并
- 05.22fix(netx): retry GMTLS dial with ECC, ECDHE, then all cipher suites已合并
- 05.21fix(yakit): split SyntaxFlow rule search into name and full-text fuzzy已合并
- 05.21fix(project): reject duplicate names on UpdateProject已合并
- 05.21Fixup/lowhttp/cookiejar session tests已合并
- 05.21fix(sqlite): vacuum-sqlite default WAL checkpoint and safe cleanup已合并
- 05.19fix(lowtun): use per-GOOS TUNLinkOffset for gVisor TUN link layer已合并
- 05.15fix(omap): avoid deadlock calling locked methods inside ForEach已合并
- 05.14Feature/ssa2llvm/linkprep runtime syms已合并
2026.04
14 个 PR · 1 个项目
yaklang/yaklang14
- 04.27feat(code_security_audit): pass dir_explore target_path via AttachedResource已合并
- 04.23fix(php): handle trailing ?> in nowdoc/heredoc for PHP 已合并
- 04.17ci: improve essential test failure summaries已合并
- 04.14refactor(ssa): clean up compile cache saves and benchmark ssa-compile已合并
- 04.13ci: rebalance essential ssa suites and improve failure summary已合并
- 04.10Feature/ssa2llvm/obfuscation foundation已合并
- 04.09Fix/ssa/php project ast perf已合并
- 04.07fix(go2ssa): ignore fixture corpus files已合并
- 04.07Fix/ssa/go project ast perf已合并
- 04.03Fix/ssa/python project ast perf已合并
- 04.03Fix/ssa/java project ast perf已合并
- 04.02Feature/ssa2llvm/obf ssa function call已合并
- 04.01ci: 通过预编译套件缩短 essential-tests 用时已合并
- 04.01Fix/java sideeffect bind member scope已合并
2026.03
14 个 PR · 2 个项目
yaklang/yaklang12
- 03.31Feature/ssa2llvm/support complex function call已合并
- 03.24fix(php): stabilize pfsense parsing and defined() compile path已合并
- 03.24Fix/ssa/compile java 0319已合并
- 03.19fix: preserve custom syntaxflow rule metadata已合并
- 03.19refactor(syntaxflow): unify analysis/check/evaluate into sfanalysis已合并
- 03.19Enhance/ssa/antlr clean cache已合并
- 03.17ssa2llvm: embed runtime + support --stdlib-compile已合并
- 03.17Refactor/sfvm/value condition已合并
- 03.12Feature/ssa2llvm/basic obfuscation framework已合并
- 03.12Fix/ssa/programoverlayer should exist in programlist已合并
- 03.12Feature/ssa2llvm/implement yak lib已合并
- 03.04refactor(ssacli): unify compile path and config options已合并
yaklang/ssa.to2
2026.02
16 个 PR · 2 个项目
yaklang/yaklang15
- 02.28feat(schema): add PacketPair and PacketPairList已合并
- 02.28Fix/ssa/editor cache and processinfof已合并
- 02.27Enhance/ssa/codescan-support-namepool已合并
- 02.27Feature/ssa/support llvm memory gc已合并
- 02.27refactor(cli): update import paths to use local urfavecli package已合并
- 02.27refactor(cli): embed urfave/cli v1 fork with AllowUnknownFlags 已合并
- 02.24code-scan: improve config and diagnostics handling已合并
- 02.11support csrf poc auto-submit via grpc option已合并
- 02.06Feature/slow sql/support databasepath已合并
- 02.06feat(java-decompiler): export zip to backend file and return path已合并
- 02.06Refactor/db/support drop cache已合并
- 02.06fix(regen): expand {n} when n>1000 已合并
- 02.05Feature/cli/force sync已合并
- 02.03refactor: replace custom file system interfaces with ResourceMonitor …已合并
- 02.03Fixup/mitm/filter suffix已合并
yaklang/yakit1
2026.01
12 个 PR · 2 个项目
yaklang/yaklang9
- 01.29Feature/ssa/support llvm golang runtime已合并
- 01.29Fix/php2ssa/fixup antlr已合并
- 01.23Feature/ssa/support llvm musllib已合并
- 01.21Feature/ssa/support llvm basic已合并
- 01.21Feature/ssacli/improve ssa db已合并
- 01.19Feature/ssa/python support class已合并
- 01.14refactor(yak): update NewProgram to accept context and streamline exclude file patterns已合并
- 01.14Feat(memedit): folder path normalization and hash correct 已合并
- 01.14Feature/language/python support已合并
yaklang/wizard3
2025.12
6 个 PR · 1 个项目
yaklang/yaklang6
- 12.26Feature/ssa/support multiple layer program已合并
- 12.25Fix/ssa/exclude file已合并
- 12.09Feature/ssacli/code scan support folder已合并
- 12.08Fix/linux/ast parse error已合并
- 12.08fix(ssaconfig):restore json tag已合并
- 12.02Refactor/utils/diagnostic已合并
2025.11
12 个 PR · 1 个项目
yaklang/yaklang12
- 11.26feat: log timeout warnings during database initialization已合并
- 11.20Feature/cmd/check local grpc已合并
- 11.19refactor(ssaapi):use ssaconfig in compile time已合并
- 11.17feat(ssaconfig): add support for applying extra options in derived co…已合并
- 11.11Fix/ssa/pass for builtin script and aitool 已合并
- 11.07feat(grpc):syntaxflow scan active process show in frontend已合并
- 11.07fix(ci): enhance WIP detection logic and skip CI for non-WIP changes已合并
- 11.06fix(grpc_fuzzer): http response contain extractedResult已合并
- 11.06feat(yakurl): add ID field to EventSet and update event handler已合并
- 11.06fix:test ci restart已合并
- 11.05fix(sca):add recover and string check 已合并
- 11.03Fix/ssa/remove debug info fixup panic 已合并