Repo brief: shopspring/decimal

Generated by RepoPilot · document generated 2026-09-14 · concise human review Evidence snapshot · analyzed 2026-09-14T01:16:57.059Z · commit ca4740823783

Verdict

Mixed — OpenSSF Scorecard says this is unmaintained

• Last commit 3w ago
• 50+ active contributors
• Distributed ownership (top contributor 34% of recent commits)
• MIT licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

shopspring/decimal is a Go library that implements arbitrary-precision fixed-point decimal arithmetic, solving the classic problem that binary floating-point types (like float64) cannot accurately represent decimal fractions like 0.1. It provides Add, Subtract, Multiply, and Divide operations with configurable precision, plus SQL/JSON/XML serialization for database-backed applications. Single-package library: decimal.go and decimal_test.go form the core, with const.go holding numeric constants, rounding.go for rounding strategies, and decimal-go.go for backward compatibility. Supporting test files (decimal_bench_test.go, decimal_go124_test.go, const_test.go) validate behavior across…

Start here

Open these first:

• decimal.go — Core Decimal type definition and primary arithmetic operations (Add, Sub, Mul, Div) implementing fixed-point precision.
• const.go — Constant definitions and limits for the decimal library, including maximum digit constraints.
• rounding.go — Rounding strategy implementations used during division and other precision-sensitive operations.
• decimal_test.go — Primary test suite validating arithmetic correctness and edge cases across all decimal operations.
• decimal_bench_test.go — Performance benchmarks establishing baseline performance characteristics for critical operations.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/shopspring/decimal.git
cd decimal
go mod download
go test ./...

Daily commands:

This is a library, not an application. Run tests with go test ./.. or benchmark with go test -bench=. ./... to validate behavior. No server or CLI to start.

Key cautions & unknowns

• Scorecard: marked unmaintained (1/10)
• Scorecard: default branch unprotected (0/10)
• Precision limits: library documents max 2^31 digits after decimal point; exceeding this will fail silently or panic. Zero-value semantics: zero-value Decimal{} is safe to use (equals 0), but callers must…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard
• License evidence

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.