Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-26 03:40 UTC
Fishwaldo / alexactl
Fishwaldo/alexactl erreicht einen Gesundheitsindex von 52 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei AI Readiness (76/100) ab, am schwächsten bei Community & Adoption (33/100). Zuletzt vor 6 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
52
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
52
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Justin HammondPersönliches Konto
121 Follower105 öffentliche Reposseit Juni 2011Dynamx (Singapore) Pte Ltd
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht |
|---|---|---|---|---|---|
| Go | github.com/Fishwaldo/alexactl | v0.1.0 | - | 1 | vor 6 Tagen |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
62
Entwicklungsaktivität
53Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 6 Tagen |
| 2.8/36 | Commit-Rhythmus — 4/52 Wochen mit Commits |
| 14.6/18 | Commit-Volumen — 41 Commits im letzten Jahr |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Verwendete Eingangsdaten
| commits_last_year | 41 |
| human_commit_share | 0,878 |
| days_since_last_push | 6 |
| active_weeks_last_year | 4 |
Release-Disziplin
76Gut
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 1 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 6 Tagen |
| 12.6/27 | Release-Rhythmus — Rhythmus unbekannt (nur ein Release) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Verwendete Eingangsdaten
| releases_count | 1 |
| latest_release_tag | v0.1.0 |
| releases_from_tags | nein |
| days_since_latest_release | 6 |
| mean_days_between_releases | — |
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
33
Popularität & Verbreitung
1Kritisch
Wie die Bewertung erfolgt
| 0/60 | Stars — 0 Stars |
| 0/25 | Forks — 0 Forks |
| 0/15 | Watcher — 0 Watcher |
Verwendete Eingangsdaten
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
70Gut
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (MIT) |
| 18/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | ja |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
53
Maintainer-Resilienz (Bus-Faktor)
20Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 0/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits |
| 1.4/13.5 | Breite der Beitragenden — 1 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Wie die Bewertung erfolgt
| 0/46.8 | Issue-Lösungsquote — keine Issues oder keine Daten |
| 31.9/38.3 | PR-Annahme — 5/6 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/20 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 5 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 1 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote. Die verbleibenden Gewichte wurden renormalisiert.
Eigentümerschaft & Trägerschaft
62Mittel
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 15/25 | Reichweite des Inhabers — 121 Follower von Fishwaldo |
| 25/25 | Kontohistorie — 105 öffentliche Repos, Kontoalter ca. 15 Jahre |
Verwendete Eingangsdaten
| followers | 121 |
| owner_type | User |
| is_verified | — |
| owner_login | Fishwaldo |
| public_repos | 105 |
| account_age_days | 5.524 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Paketpflege
84Gut
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf go |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 6 Tagen |
| 4/20 | Versionshistorie — 1 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | github.com/Fishwaldo/alexactl |
| ecosystems | go |
| any_deprecated | nein |
| min_days_since_publish | 6 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
68
Engineering-Praktiken
64Mittel
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 2 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — .golangci.yml |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | ja |
| has_precommit_config | nein |
Dokumentation
75Gut
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 0/15 | Dokumentations-/Homepage-Site |
| 0/10 | Repository-Beschreibung |
| 10/10 | Topics — 2 Topics |
| 10/10 | Wiki |
Verwendete Eingangsdaten
| topics | alexa, amazon |
| has_wiki | ja |
| homepage | — |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | nein |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
37
Sicherheitslage
37Gefährdet
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/20 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3,7 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
76
AI-Agentenkontext & Leitlinien
85Exzellent
Wie die Bewertung erfolgt
| 45/45 | Agentenanweisungen — CLAUDE.md |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 40/40 | Lesbare Commit-Historie — 36 von 36 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 5.187 |
Wie die Bewertung erfolgt
| 12.6/18 | Bootstrap mit einem Befehl — go.mod (Toolchain-Konvention, kein Task-Runner) |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — .golangci.yml |
| 11/11 | Statische Typprüfung — Go (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — lockfile |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 41 |
| 8/8 | Automatisierte Wartung — 5 der letzten 41 Commits sind automatisierte Abhängigkeits-Updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | go.sum |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0,122 |
AI-Code-Lesbarkeit für Modelle
100Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Go (statisch typisiert) |
| 54.7/55 | Handhabbare Dateigrößen — 1/188 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Go |
| largest_source_bytes | 710.141 |
| source_files_sampled | 188 |
| oversized_source_files | 1 |
Maschinenlesbare AI-Schnittstellen
40Gefährdet
Wie die Bewertung erfolgt
| 40/40 | API-Schema (OpenAPI/GraphQL/proto) — internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql |
| 0/20 | MCP-Server |
| 0/40 | Lauffähige Beispiele |
Verwendete Eingangsdaten
| example_dirs | — |
| has_mcp_signal | nein |
| api_schema_files | internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql |
Eckdaten
0GitHub-Sterne
1Mitwirkende
41Commits, letzte 12 Monate
6Tage seit letztem Push
1Releases
1Bus-Faktor
0offene Issues
GoPaket-Ökosysteme
Warnungen zur Datenerhebung
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
OpenSSF Scorecard 3.7 / 10
3.7Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/20 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 3 contributing companies or organizations -- score normalized to 10 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| k. A. | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direkte Abhängigkeiten 8
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Go | github.com/Khan/genqlient | v0.8.1 | go.mod |
| Go | github.com/PuerkitoBio/goquery | v1.12.0 | go.mod |
| Go | github.com/hashicorp/go-retryablehttp | v0.7.8 | go.mod |
| Go | github.com/spf13/cobra | v1.10.2 | go.mod |
| Go | github.com/spf13/viper | v1.21.0 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | golang.org/x/sync | v0.22.0 | go.mod |
| Go | golang.org/x/text | v0.40.0 | go.mod |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"alexa",
"amazon"
],
"is_fork": false,
"size_kb": 601,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 888242
},
"pushed_at": "2026-07-19T08:50:08Z",
"created_at": "2026-07-19T07:16:36Z",
"owner_type": "User",
"updated_at": "2026-07-19T10:40:54Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Justin Hammond",
"type": "User",
"login": "Fishwaldo",
"company": "Dynamx (Singapore) Pte Ltd",
"location": "127.0.0.1",
"followers": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/842308?v=4",
"created_at": "2011-06-10T14:40:59Z",
"is_verified": null,
"public_repos": 105,
"account_age_days": 5524
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-07-19T08:09:39Z"
}
],
"recent_commits": [
{
"oid": "914ed50990d3e480853c56355e0c4e73ba5ed21a",
"body": "Sweep the CLI harness for consistency across all commands:\n\n- Standardize the enumerate verb on `list` (was `ls` on\n alarms/reminders/timers/lists) and the item-creation verb on `create`\n (was `add` on lists). No aliases.\n- Merge `devices unlock` into `devices lock <lock|unlock>` to match the\n po\n[…]\n`.\n- Rename the `volume` placeholder `<0..100>` to `<percent>`.\n- Route all command output through `cmd.OutOrStdout()` (diagnostics via\n `cmd.ErrOrStderr()`) instead of writing to os.Stdout directly.",
"is_bot": false,
"headline": "refactor(cli)!: unify command verbs, args, and output routing",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:50:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "437f12cd76f86af91a55249dbab8956b14d1bf8e",
"body": "Bump the go.mod go directive to 1.26.0 and the CI/release workflow Go\nversions to 1.26.x.\n\nThis also fixes the failing CI on main. The test matrix pinned 1.24.x,\nbelow go.mod's floor, so `go mod download` errored with \"go.mod requires\ngo >= 1.25.0\". And golangci-lint v2.1.6 (built with go1.24) refused to run\nagainst a newer go.mod target (\"the Go language version used to build\ngolangci-lint is lower than the targeted Go version\"); bump the pin to\nv2.12.2, which is built with go1.26.",
"is_bot": false,
"headline": "ci: bump Go to 1.26 and golangci-lint to v2.12.2",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "935f48c198196e77f8a5957686c6588edd0b8dc4",
"body": "…s/setup-go-7\n\nbuild(deps): bump actions/setup-go from 5 to 7",
"is_bot": false,
"headline": "Merge pull request #4 from Fishwaldo/dependabot/github_actions/action…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:13:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a94886f8a1b377495329023a63ba33e6c39dd353",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 7.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v5...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/setup-go from 5 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T08:12:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f466ce710f73cb9b86b38b8ea82ff11cbfaa78d",
"body": "…/x/text-0.40.0\n\nbuild(deps): bump golang.org/x/text from 0.37.0 to 0.40.0",
"is_bot": false,
"headline": "Merge pull request #5 from Fishwaldo/dependabot/go_modules/golang.org…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:11:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01d45663e880befb1481f7c5ef2e88418a8e89c6",
"body": "…v/codecov-action-7\n\nbuild(deps): bump codecov/codecov-action from 5 to 7",
"is_bot": false,
"headline": "Merge pull request #3 from Fishwaldo/dependabot/github_actions/codeco…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "745b18f12b6f7ce0425fe364a747241503e88625",
"body": "…ci/golangci-lint-action-9\n\nbuild(deps): bump golangci/golangci-lint-action from 7 to 9",
"is_bot": false,
"headline": "Merge pull request #2 from Fishwaldo/dependabot/github_actions/golang…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46cb4ff528ed1b4744653b41cb8878eca025ea43",
"body": "…s/checkout-7\n\nbuild(deps): bump actions/checkout from 4 to 7",
"is_bot": false,
"headline": "Merge pull request #1 from Fishwaldo/dependabot/github_actions/action…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:10:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8529e4a3b8f6a4d346088fded91325bd03cc421",
"body": "…jection\n\nVersion is no longer hard-coded in version.go: the Version const becomes a\nvar defaulting to \"dev\" and is injected at link time from the git tag by a\nnew release workflow (-ldflags -X ...Version=<version>). version.go is now\nthe single source of truth for the build version; UpstreamVersion\n[…]\n/darwin amd64/arm64 with the version injected and publish the binaries\nto a GitHub Release on tag push. Refresh README/CLAUDE docs to the 0.1.0\nMVP status and drop stale v1.0.0 API-surface references.",
"is_bot": false,
"headline": "chore(release)!: re-baseline to v0.1.0 MVP with build-time version in…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "46fe7f36f92f92b92de1b146e7a70277e2f8485a",
"body": "Bumps [golang.org/x/text](https://github.com/golang/text) from 0.37.0 to 0.40.0.\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.37.0...v0.40.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/text\n dependency-version: 0.40.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/text from 0.37.0 to 0.40.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8beccb86894d8ae1640970d058f39db25a21b133",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 7.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\npendency-name: codecov/codecov-action\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump codecov/codecov-action from 5 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0489dcab0e6eb18d9587b48e5cf75d3a7fa9cc1a",
"body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 7 to 9.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/v7...v9)\n\n---\nupdated-dependencies:\n- dependency-name: golangci/golangci-lint-action\n dependency-version: '9'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golangci/golangci-lint-action from 7 to 9",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5772db3786b766647c947a5593362a05668b3def",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 4 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9938b75285deea44b1cd1a3b36222a5fa7fdcf5d",
"body": "Port aioamazondevices v13.7.2 -> v14.2.0: push gateway host + ping\nreconnect, history recordType handling, non-US cookie scoping, retry\ntrim, device restart, communications service, and v2 ToDo lists API.",
"is_bot": false,
"headline": "Merge branch 'upstream-catchup-14.2.0'",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-12T01:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1329bfc3c4c6736b757921b1d8209a3f14634a37",
"body": "Catches this library up to upstream aioamazondevices v14.2.0.",
"is_bot": false,
"headline": "chore: bump Version to 0.11.0, UpstreamVersion to 14.2.0",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T16:58:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e52ac5a7321457cc9267dd39643ff7f798c697c",
"body": "Ports upstream #839. Replaces the deprecated v1 alexashoppinglists\nendpoints with alexashoppinglists/api/v2/lists (POST-fetch model,\nitemId/itemStatus/version). ListType is now SHOP/TODO/CUSTOM.\n\nBREAKING: List/ListItem field set and ListType values changed.",
"is_bot": false,
"headline": "feat(lists)!: migrate to the v2 ToDo lists API",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T16:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32af010b6ace9a03b6b5615281fc852e31bf3779",
"body": "Ports upstream #506. New CommunicationsService (get + set) on the global\ncomms host, DropInStatus enum, Device.CommunicationSettings field, and\nan 'alexactl comms' command tree.",
"is_bot": false,
"headline": "feat(comms): add communications/announcement/drop-in preferences",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T16:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8892ced12bfa01c69a9a83b2425a6ef543a1bea6",
"body": "Ports upstream #950. New DevicesService.Restart POSTs the reboot\nendpoint with a bearer token; adds ErrCannotRestartDevice and an\n'alexactl devices restart --device' command.",
"is_bot": false,
"headline": "feat(devices): add Restart (device reboot)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:35:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec3045b895e34c640a09882527200538e59a89e",
"body": "Ports upstream #929: 2 retries with 2s-5s backoff instead of 6 retries\nup to 21s, so throttled requests settle in seconds.",
"is_bot": false,
"headline": "fix(httpwrapper): trim retry budget to match upstream [0,2,5]",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:30:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e198a4f0fc4db2ccf0e8dadc345055003123c83",
"body": "Ports upstream #926. Global endpoints (api.amazon.com, the bob-dispatch\nAVS host, the comms host) live on amazon.com regardless of marketplace\nTLD; re-seed session cookies onto .amazon.com when domain != com.",
"is_bot": false,
"headline": "fix(httpwrapper): scope cookies to amazon.com for non-US accounts",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad9f6639419e4c6bccb2525805656bae5cfdb9e1",
"body": "Ports upstream #858. deviceInfo may now be a dict, a one-element\narray, or absent; records with no utteranceType fall back to\nrecordType then \"Unknown\"; empty intent defaults to \"Unknown\".\n\nBREAKING: VocalRecord.UtteranceType renamed to HistoryType.",
"is_bot": false,
"headline": "fix(history)!: handle recordType and array deviceInfo",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:07:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6dbba8dbcc90ce336e4c6c2a7ba674a3251c5ad",
"body": "Ports upstream #899. A non-reauth ping error now closes the conn and\nreturns so streamLoop reconnects with backoff, instead of logging a\nwarning every pingInterval forever on a dead-but-not-EOF connection.",
"is_bot": false,
"headline": "fix(push): reconnect on ping failure instead of looping",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T09:59:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d604108c318b3f1e968d7eec86ad45ea29189cba",
"body": "Ports upstream #874 (v14.x) host change from\nalexa.{region}.gateway.devices.a2z.com to\nbob-dispatch-prod-{region}.amazon.com.",
"is_bot": false,
"headline": "fix(push): point AVS gateway at bob-dispatch host",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T09:23:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "674f109534ce1b7aef6ce97512fb7cd2cc1bc260",
"body": null,
"is_bot": false,
"headline": "chore: gitignore session backups and playwright MCP artifacts",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c5d16133c190cdc547139e54e7255f3df459476",
"body": "- Replace the Apache-2.0 LICENSE with MIT (Copyright 2026 Justin Hammond).\n- Update the README license badge + section.\n- Reframe the project as heavily inspired by aioamazondevices (Apache-2.0)\n rather than a port (README, NOTICE, CONTRIBUTING, CLAUDE.md, version.go),\n and reword in-code provenan\n[…]\ndeled on\".\n- Add SPDX-FileCopyrightText / SPDX-License-Identifier: MIT headers to all\n hand-written .go files (generated files excluded).\n- Keep NOTICE attribution to the upstream Apache-2.0 project.",
"is_bot": false,
"headline": "chore: relicense to MIT and add SPDX headers",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:51:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2d7cd2c4745051c9a817514fcdbe4eb69b9db3b7",
"body": "…chema\n\nMove the introspected Alexa GraphQL SDL out of the untracked\ndocs/superpowers/research tree into internal/alexagraphql/schema/schema.graphql\nand point genqlient.yaml at it, so 'go generate' is reproducible from a\nfresh clone. Regeneration produces an identical generated.go.",
"is_bot": false,
"headline": "build(codegen): vendor genqlient schema under internal/alexagraphql/s…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a85b8acdff3c9db7948936a5ad44fa70cd0d97d7",
"body": "Rewrite comments that referenced the development \"Phase N\" plans (now\nremoved from the repo) into self-contained descriptions of the actual\nbehavior, and drop pointers to the untracked docs/superpowers research\nfiles. Comment/help-text only; no code changes. Keeps generated.go in\nsync with its queries/*.graphql sources.",
"is_bot": false,
"headline": "docs: make godoc standalone — drop references to internal phase plans",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:30:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae9cf8b5af9d261f6a978ec34944ee190a9b5b34",
"body": null,
"is_bot": false,
"headline": "chore: stop tracking CHANGELOG.md (kept local, gitignored)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:03:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff1af39c867b1713032a414d18ff89071d398ff6",
"body": "…mat section",
"is_bot": false,
"headline": "docs(claude): drop superpowers spec reference; add commit message for…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:02:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56658af9a0299cfe492b97a083626c0749540085",
"body": null,
"is_bot": false,
"headline": "chore: stop tracking docs/superpowers (kept local, gitignored)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:00:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "013bc3d5a5c96f7d67ddbf3c2a68f91f713d4fe0",
"body": "Rebrand the project to alexactl:\n- module path github.com/Fishwaldo/goamazondevices -> github.com/Fishwaldo/alexactl\n- root Go package amazondevices -> alexactl (API: alexactl.Client)\n- test CLI cmd/amazondevices-test -> cmd/alexactl (binary: alexactl)\n- log-prefix, header, and doc/spec/plan references updated accordingly\n\nUpstream aioamazondevices references are intentionally preserved.\nVersion constant bumped to 0.10.0; CHANGELOG [0.10.0] entry added.",
"is_bot": false,
"headline": "rename: goamazondevices -> alexactl; bump to v0.10.0",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T16:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65de81ffa67b30bfcfa6afa15e1f505b95e7e8d2",
"body": "…ayloads\n\nMove the last commands off the legacy --serial flag onto --device (serial\nor friendly name, default-device fallback): speak, announce, volume,\ndnd set, routines call. media-state takes --device as a no-fallback filter.\n\nConvert required flag payloads to positional arguments:\n- speak <text>\n[…]\nand-text>\n- routines call <name>, skill launch <skill>, sound play <sound-id>\n- music <provider> <query>, dnd set <on|off>\n- alarms create <at>, timers create <duration>, reminders create <at> <label>",
"is_bot": false,
"headline": "feat(cli)!: finish --device migration; positional args for required p…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T16:42:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "878939af08460dcad0f11c3d8b658d1bd714c76b",
"body": "Move default-device handling out of the library into the CLI: a Store for\nconfig get/set/unset (allowlisted) with session and cache-file persistence,\na serial-or-name resolver, and a unified --device flag across all\ndevice-targeting commands. Includes the breaking removal of library-side\ndefault-device handling.\n\nSquashed from the cli-config-default-device implementation plan.",
"is_bot": false,
"headline": "cli-config: config store + unified --device flag (v0.9.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T15:50:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "600da7e8cffa363b9524a0afb69966ab308407e2",
"body": "Generic internal/cache engine: Cache[V] with singleflight loaders, TTL\nCacheClass tiers, file/memory persistence, and a Manager with\nRegister/Restore/Snapshot/InvalidateTag. Migrates devices.list,\nmedia.sounds, sequence.routines, history.csrf, and registers\nmusicProviders/deviceVolumes/mediaStates/dnd/lists/schedules/customerID\ncaches, plus a PushBridge that invalidates on push events.\n\nSquashed from the cache-service implementation plan.",
"is_bot": false,
"headline": "cache-service: internal/cache engine + service migrations (v0.8.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-29T10:45:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "181a97d6f20a8707371db9b6569bdb0151cc77f4",
"body": "Replace the hardcoded SoundsList with a live Sounds(ctx) catalogue fetch\nbacked by a 1h TTL cache (WithSoundsTTL), validate PlaySound soundIDs\nagainst the catalogue, and add the sound-list CLI path.\n\nSquashed from the media-list-sounds implementation plan.",
"is_bot": false,
"headline": "media-list-sounds: MediaService.Sounds live catalogue (v0.7.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-28T16:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "538e4d1804182aa181c7136bd77bef1f8f34d2c4",
"body": "AlarmsService, RemindersService, and TimersService over a shared\n/api/notifications fetcher split by kind, with typed Recurrence helpers,\nfull CRUD (Create/Update/Delete/Enable/Disable/Snooze/Acknowledge), CLI\nsubcommands, and removal of the legacy Notifications/Schedule surface.\n\nSquashed from the Phase 6 Schedules services implementation plan.",
"is_bot": false,
"headline": "Phase 6: Schedules services — Alarms, Reminders, Timers (v0.6.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-28T16:19:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e3c3df9ce1dd58376c733044b85e9b3da4fd50b",
"body": "ListsService with Get (parses both list types, sorts active-first),\nAddItem, Complete/Uncomplete, Delete, and Rename via PUT-echo, wired onto\nthe Client as a session consumer. Includes the lists CLI subcommands and\nwire-field/timestamp parser fixes.\n\nSquashed from the Phase 5 Lists service implementation plan.",
"is_bot": false,
"headline": "Phase 5: Lists service (v0.5.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-28T13:39:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d92db142a12d0834d3c4fcd48c3afd0f25c0646d",
"body": "Phase 4-pre — typed GraphQL client via genqlient (ListEndpoints,\ngetEndpointState), retiring the hand-written GraphQL helpers.\nPhase 4a — smart-home discovery + read: Kind enum, endpoint-to-Device\nsurfacing, Inspect, and sensor property parsing.\nPhase 4b — write surface: setEndpointFeatures, typed P\n[…]\n Range/Toggle stubs.\n\nConcludes the pre-maintenance era with the v1.0.0 API freeze and the\nswitch of CLAUDE.md to maintenance phase.\n\nSquashed from the Phase 4-pre/4a/4b/4c/4d/4e implementation plans.",
"is_bot": false,
"headline": "Phase 4: smart-home device control (v0.4.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-27T04:04:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dd6624cd5c549586441d355e08194ca5c05bd91d",
"body": "Phase 3a — push decoder layer: PushMessageType enum, PushEvent interface,\ntyped event structs, multipart AVS directives parser, and table-driven\ndecoder tests.\nPhase 3b — push runtime: PushService with single-shot directives stream,\nfan-out Subscribe, exponential-backoff reconnect, ping keepalive, reauth\nhandling, and CLI 'push tail'. Includes structured DEBUG body logging.\n\nSquashed from the Phase 3a/3b implementation plans.",
"is_bot": false,
"headline": "Phase 3: push event streaming (v0.3.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-25T10:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e1a8302ebd6f3da91c0f97bc2fdf46162e9f1d8",
"body": "Phase 2a — DnDService and SensorsService with per-device sensor maps wired\ninto the Refresh pipeline.\nPhase 2b — NotificationsService (RFC 5545 recurrence) and HistoryService\n(Vocal with CSRF + bearer POST).\nPhase 2c — SequenceService (behaviors/preview batching, Routines) with\nSpeak/Announce/SetVolume refactored as Sequence facades, plus PlaySound,\nPlayMusic, Control, CallRoutine, InfoSkill, DeviceVolumes, MediaStates,\nand MusicProviders.\n\nSquashed from the Phase 2a/2b/2c implementation plans.",
"is_bot": false,
"headline": "Phase 2: DnD, Sensors, Notifications, History, Sequence + Media (v0.2.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-25T05:40:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1816597ab93b41a7f6b7790160f31dd170c0c46a",
"body": "OAuth + form-scrape login with OTP, typed Session, device listing and\nenrichment via Nexus GraphQL, Speak/Announce/SetVolume media, and the\namazondevices-test CLI skeleton. Includes scrub log-redaction, transparent\n401 refresh, go-enum codegen, and post-release hardening fixes.\n\nSquashed from the Phase 1 implementation plan.",
"is_bot": false,
"headline": "Phase 1: core library foundation (v0.1.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-24T15:56:03Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 41,
"latest_release_at": "2026-07-19T08:09:39Z",
"latest_release_tag": "v0.1.0",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 4,
"days_since_latest_release": 6,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": true,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/Fishwaldo/alexactl",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/Fishwaldo/alexactl",
"is_deprecated": false,
"latest_version": "v0.1.0",
"repository_url": "https://github.com/Fishwaldo/alexactl",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T08:07:33Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"internal/alexagraphql/queries/endpoint_all_features.graphql",
"internal/alexagraphql/queries/endpoint_state.graphql",
"internal/alexagraphql/queries/list_endpoints.graphql",
"internal/alexagraphql/queries/set_endpoint_features.graphql",
"internal/alexagraphql/queries/set_endpoint_features_v2.graphql",
"internal/alexagraphql/schema/schema.graphql"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 710141,
"source_files_sampled": 188,
"oversized_source_files": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5187
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/Khan/genqlient",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.1"
},
{
"name": "github.com/PuerkitoBio/goquery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.0"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.8"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.40.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "Fishwaldo",
"commits": 36,
"avatar_url": "https://avatars.githubusercontent.com/u/842308?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/20 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "914ed50990d3e480853c56355e0c4e73ba5ed21a",
"ran_at": "2026-07-26T03:40:15Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T18:23:17Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T08:13:10Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Fishwaldo/alexactl",
"host": "github.com",
"name": "alexactl",
"owner": "Fishwaldo"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"security": 37,
"vitality": 62,
"community": 33,
"governance": 53,
"engineering": 68
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 62,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"commits_last_year": 41,
"human_commit_share": 0.878,
"days_since_last_push": 6,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "41 commits in the last year",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 41
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.1.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/20 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 121,
"owner_type": "User",
"is_verified": null,
"owner_login": "Fishwaldo",
"public_repos": 105,
"account_age_days": 5524
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "121 followers of Fishwaldo",
"points": 15,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 121,
"login": "Fishwaldo"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "105 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 105
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"packages": [
"github.com/Fishwaldo/alexactl"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "1 published versions",
"points": 4,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 1
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 68,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"alexa",
"amazon"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "2 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 2
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 37,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/20 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 76,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5187
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "36 of 36 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 36,
"sampled": 36
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.122
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 41",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 41
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "5 of the last 41 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 5,
"sampled": 41
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 710141,
"source_files_sampled": 188,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/188 source files over 60KB",
"points": 54.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 188,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"internal/alexagraphql/queries/endpoint_all_features.graphql",
"internal/alexagraphql/queries/endpoint_state.graphql",
"internal/alexagraphql/queries/list_endpoints.graphql",
"internal/alexagraphql/queries/set_endpoint_features.graphql",
"internal/alexagraphql/queries/set_endpoint_features_v2.graphql",
"internal/alexagraphql/schema/schema.graphql"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T03:40:23.054548Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/Fishwaldo/alexactl.svg",
"full_name": "Fishwaldo/alexactl",
"license_state": "standard",
"license_spdx": "MIT"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Go.