Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-24 13:15 UTC

InnerOpen / marvin-cli

Official CLI for Marvin CMS - interact with the Marvin Publishing API

TypeScriptKeine Lizenz erkannt★ 0 Sterne⑂ 0 Forksseit Juli 2026Auf GitHub ansehen ↗

InnerOpen/marvin-cli erreicht einen Gesundheitsindex von 58 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (74/100) ab, am schwächsten bei Community & Adoption (32/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

58
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

58
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

InnerOpenOrganisation
0 Follower8 öffentliche Reposseit Juni 2026

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlichtTags
npm@inneropen/marvin-cli2.7.06.69247vor 5 Tagenmarvincmsclipublishingheadless-cms

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

74Gut · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
2.1/36Commit-Rhythmus — 3/52 Wochen mit Commits
18/18Commit-Volumen — 148 Commits im letzten Jahr
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Verwendete Eingangsdaten
commits_last_year148
human_commit_share1
days_since_last_push0
active_weeks_last_year3

Release-Disziplin

100Exzellent
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 26 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 5 Tagen
27/27Release-Rhythmus — ein Release etwa alle 0,5 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count26
latest_release_tagv2.7.0
releases_from_tagsnein
days_since_latest_release5
mean_days_between_releases0,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

32Gefährdet · 18 % des Gesamtindex
Wie die Bewertung erfolgt
0/60Stars — 0 Stars
0/25Forks — 0 Forks
0/15Watcher — 0 Watcher
Verwendete Eingangsdaten
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
0/22.5Lizenz — keine Lizenzdatei erkannt
18/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licensenein
has_contributingja
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein
Wie die Bewertung erfolgt
51/80Downloads pro Monat — 6.692 Downloads/Monat über npm
0/20Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen
Verwendete Eingangsdaten
packages@inneropen/marvin-cli
dependents
ecosystemsnpm
total_downloads
monthly_downloads6.692
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

54Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
4.8/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 79 % der Commits
2.7/13.5Breite der Beitragenden — 2 Beitragende
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Verwendete Eingangsdaten
bus_factor1
contributors_sampled2
top_contributor_share0,788
Wie die Bewertung erfolgt
0/46.8Issue-Lösungsquote — keine Issues oder keine Daten
38.2/38.3PR-Annahme — 1/1 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 0/2 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs1
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
0/25Reichweite des Inhabers — 0 Follower von InnerOpen
7.1/25Kontohistorie — 8 öffentliche Repos, Kontoalter ca. 0 Jahre
Verwendete Eingangsdaten
followers0
owner_typeOrganization
is_verified
owner_loginInnerOpen
public_repos8
account_age_days31

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf npm
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen
20/20Versionshistorie — 47 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packages@inneropen/marvin-cli
ecosystemsnpm
any_deprecatednein
min_days_since_publish5

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

71Gut · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 4 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
0/10Topics
10/10Wiki
Verwendete Eingangsdaten
topics
has_wikija
homepage
has_readmeja
has_docs_dirja
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

53Mittel · 16 % des Gesamtindex

Sicherheitslage

41Gefährdet
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/2 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
0/2.5Lizenz — license file not detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories0
affected_packages0
assessed_packages5
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:@inneropen/marvin-cli@2.7.0 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 5 Paketen. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

55Mittel · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 94 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,94
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — tsconfig.json
10/10Reproduzierbare Umgebung — lockfile
10/10Belegte Agentenpraxis — 47 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
1/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilespackage-lock.json
has_dockerfilenein
typed_languageja
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configstsconfig.json
agent_commit_share0,47
toolchain_manifests
dependency_bot_commit_share0
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — TypeScript (statisch typisiert)
55/55Handhabbare Dateigrößen — 0/67 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageTypeScript
largest_source_bytes13.750
source_files_sampled67
oversized_source_files0
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — examples
Verwendete Eingangsdaten
example_dirsexamples
has_mcp_signalnein
api_schema_files

Eckdaten

0GitHub-Sterne
2Mitwirkende
148Commits, letzte 12 Monate
0Tage seit letztem Push
26Releases
1Bus-Faktor
0offene Issues
npm, PyPIPaket-Ökosysteme

Warnungen zur Datenerhebung

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Weitere Details

OpenSSF Scorecard 4.1 / 10
4.1Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-24 13:15 UTC

10Binary-Artifactsno binaries found in the repo
1Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/2 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
0Licenselicense file not detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
1Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Direkte Abhängigkeiten 4
RegistryPaketVersionsvorgabeManifest
npm@inneropen/marvin-sdk^3.2.0-next.23package.json
npmchalk^5.6.2package.json
npmcommander^12.1.0package.json
npmdotenv^16.4.5package.json
Alle Abhängigkeiten nicht erhoben

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Abhängigkeits-Advisories 0

Die Installation von npm:@inneropen/marvin-cli@2.7.0 zieht 5 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 2357,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "JavaScript": 14983,
        "TypeScript": 292017
      },
      "pushed_at": "2026-07-24T04:00:30Z",
      "created_at": "2026-07-07T00:27:35Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-19T00:30:37Z",
      "description": "Official CLI for Marvin CMS - interact with the Marvin Publishing API",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://www.inneropen.com",
      "name": "InnerOpen",
      "type": "Organization",
      "login": "InnerOpen",
      "company": null,
      "location": "United States of America",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/295994472?v=4",
      "created_at": "2026-06-22T22:55:23Z",
      "is_verified": null,
      "public_repos": 8,
      "account_age_days": 31
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2026-07-19T00:30:39Z"
        },
        {
          "tag": "v2.6.0-next.23",
          "kind": "prerelease",
          "published_at": "2026-07-18T20:32:55Z"
        },
        {
          "tag": "v2.6.0-next.22",
          "kind": "prerelease",
          "published_at": "2026-07-16T17:59:13Z"
        },
        {
          "tag": "v2.6.0-next.21",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:44:45Z"
        },
        {
          "tag": "v2.6.0-next.20",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:39:59Z"
        },
        {
          "tag": "v2.6.0-next.19",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:36:43Z"
        },
        {
          "tag": "v2.6.0-next.18",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:27:03Z"
        },
        {
          "tag": "v2.6.0-next.17",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:19:34Z"
        },
        {
          "tag": "v2.6.0-next.16",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:38:41Z"
        },
        {
          "tag": "v2.6.0-next.15",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:35:31Z"
        },
        {
          "tag": "v2.6.0-next.14",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:11:50Z"
        },
        {
          "tag": "v2.6.0-next.13",
          "kind": "prerelease",
          "published_at": "2026-07-14T04:39:42Z"
        },
        {
          "tag": "v2.6.0-next.12",
          "kind": "prerelease",
          "published_at": "2026-07-12T20:29:58Z"
        },
        {
          "tag": "v2.6.0-next.11",
          "kind": "prerelease",
          "published_at": "2026-07-11T21:36:12Z"
        },
        {
          "tag": "v2.6.0-next.10",
          "kind": "prerelease",
          "published_at": "2026-07-11T17:04:59Z"
        },
        {
          "tag": "v2.6.0-next.9",
          "kind": "prerelease",
          "published_at": "2026-07-11T16:54:30Z"
        },
        {
          "tag": "v2.6.0-next.8",
          "kind": "prerelease",
          "published_at": "2026-07-11T16:46:43Z"
        },
        {
          "tag": "v2.6.1",
          "kind": "patch",
          "published_at": "2026-07-10T17:23:23Z"
        },
        {
          "tag": "v2.6.0-next.7",
          "kind": "prerelease",
          "published_at": "2026-07-10T17:22:49Z"
        },
        {
          "tag": "v2.6.0-next.6",
          "kind": "prerelease",
          "published_at": "2026-07-10T17:17:07Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2026-07-10T17:17:02Z"
        },
        {
          "tag": "v2.6.0-next.5",
          "kind": "prerelease",
          "published_at": "2026-07-10T16:53:31Z"
        },
        {
          "tag": "v2.6.0-next.4",
          "kind": "prerelease",
          "published_at": "2026-07-10T02:48:18Z"
        },
        {
          "tag": "v2.6.0-next.3",
          "kind": "prerelease",
          "published_at": "2026-07-10T00:52:40Z"
        },
        {
          "tag": "v2.6.0-next.2",
          "kind": "prerelease",
          "published_at": "2026-07-09T02:28:45Z"
        },
        {
          "tag": "v2.6.0-next.1",
          "kind": "prerelease",
          "published_at": "2026-07-08T16:50:59Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
          "body": "# [2.7.0](https://github.com/inneropen/marvin-cli/compare/v2.6.1...v2.7.0) (2026-07-19)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n* camelCase column specs in email-subscripti\n[…]\nca9b5e00b4ecb9c2eb90c8f9d18b626e))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
          "is_bot": false,
          "headline": "chore(release): 2.7.0 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-19T00:30:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "003972557c3ba8c6b9ad69a863fba5c72a081d19",
          "body": "develop carries the refactored CLI (80 files, large cleanup) plus the\nPUBLISHING_TOKEN fix; main only had release-bookkeeping commits (2.6.0,\n2.6.1 version bumps). Merge develop's tree so the stable release ships\nthe current code. semantic-release will cut the next stable version.",
          "is_bot": false,
          "headline": "chore: reconcile develop into main for stable release",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-19T00:28:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98b1dec15ef1d49c35b7cc22fd3cbb6e5236cf8",
          "body": null,
          "is_bot": false,
          "headline": "🔧 chore(deps): bump marvin-sdk to 3.2.0-next.23",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T21:16:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06a0f6b34bdfff48d5b6cd4514ac8c9818c5444a",
          "body": "# [2.6.0-next.23](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.22...v2.6.0-next.23) (2026-07-18)\n\n### Bug Fixes\n\n* **release:** parse gitmoji-prefixed commit subjects ([da9ee93](https://github.com/inneropen/marvin-cli/commit/da9ee933bfd2f4a852915e91a53255a75a3e27f4))\n\n### Features\n\n* cover all backend endpoints in the CLI ([99d9801](https://github.com/inneropen/marvin-cli/commit/99d98013722ae4306192c0ff93481ce7ef6e6045))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.23 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-18T20:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "713fcf0cb8d0ed6eb18cbcdabfb960db95653f87",
          "body": null,
          "is_bot": false,
          "headline": "👷 ci: install latest SDK develop tag instead of stale lockfile pin",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T20:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9ee933bfd2f4a852915e91a53255a75a3e27f4",
          "body": null,
          "is_bot": false,
          "headline": "🐛 fix(release): parse gitmoji-prefixed commit subjects",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T20:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22f1be530700794a9268a18ca397d6019f61586",
          "body": null,
          "is_bot": false,
          "headline": "📝 docs: add status badges",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T18:43:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99d98013722ae4306192c0ff93481ce7ef6e6045",
          "body": "Add ~76 commands so the CLI wraps every non-excluded backend operation:\n- platform ai: providers (+ nested models), operations, executions, settings\n  (nested under `platform` to mirror the SDK's platform.ai.* namespace)\n- admin: new backups, scheduled-tasks, email (+templates), groups and\n  workspa\n[…]\nn/webhook logs and\n  types; email-template event-connections\n- user: api-token get/update\n- auth: public register / forgot-password / reset-password via a new\n  AuthClient factory in shared/clients.ts",
          "is_bot": false,
          "headline": "✨ feat: cover all backend endpoints in the CLI",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T17:53:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d4b6ec3919c1600e059af6054902af424f3dae1",
          "body": "# [2.6.0-next.22](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.21...v2.6.0-next.22) (2026-07-16)\n\n### Features\n\n* centralized table-schemas.ts — single source of truth for column specs, typed against SDK schema ([a671164](https://github.com/inneropen/marvin-cli/commit/a671164bea234aa2bd06ec0f118bb7b5e52e60ae))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.22 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T17:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a671164bea234aa2bd06ec0f118bb7b5e52e60ae",
          "body": "…n specs, typed against SDK schema\n\nAll platform command renderList column specs moved to src/shared/table-schemas.ts.\nString field names use `satisfies ColSpec<T>` to type-check against SDK schema types\nat compile time. Mixed schemas (strings + functions) use `satisfies ColumnSpec<T>`.\nTest updated to use per-command fixtures built from TABLE_SCHEMAS entries.",
          "is_bot": false,
          "headline": "feat: centralized table-schemas.ts — single source of truth for colum…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82e4248529b3da38230de3ba64a9ddb623b73561",
          "body": "- webhooks log/logs: fix column spec from snake_case (webhook_id, event_type,\n  created_at) to correct camelCase (webhookId, httpStatusCode, executedAt)\n  matching the WebhookExecutionLogRead API schema\n- event-log list/entity/user: fix column spec from snake_case (event_id,\n  occurred_at, user_id, \n[…]\nests for each; the table test acts as drift detection and\n  will fail if a column spec references a wrong field name; adding a new\n  command automatically gets all three tests with no manual additions",
          "is_bot": false,
          "headline": "test: fully dynamic output format tests; fix log column field names",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:26:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d0771260994a456a574cf640168d3db7113b3e7",
          "body": "Adds Vitest test suite (89 tests) covering three layers:\n\n1. Explicit per-command tests (72) — secrets, variables, webhooks,\n   email-subscriptions, entry-types, entries, collections, api-clients,\n   assets, resources, notifications, forms, scheduled-tasks list/log,\n   event-log, invites, email-temp\n[…]\nurn for empty bypassed --json mode,\n  outputting human text instead of []\n- invites list: trailing Total: line appended after JSON body made\n  output unparseable; empty early-return also bypassed mode",
          "is_bot": false,
          "headline": "test: comprehensive output format tests for all platform list commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:10:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76ca7719ef65826823c74addb237d8721f358bdc",
          "body": "# [2.6.0-next.21](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.20...v2.6.0-next.21) (2026-07-16)\n\n### Bug Fixes\n\n* getOutputMode + handleCommandError across all 16 command files; fix camelCase column specs ([61d6838](https://github.com/inneropen/marvin-cli/commit/61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.21 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:44:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2",
          "body": "…fix camelCase column specs\n\n- All commands now respect --json/--yaml/--csv flags via getOutputMode()\n- All commands use handleCommandError for consistent structured error output\n- Fixed snake_case column specs: eventType, webhookId, createdAt, templateType etc\n- email-templates list shows Scope as 'workspace'/'system' instead of raw groupId",
          "is_bot": false,
          "headline": "fix: getOutputMode + handleCommandError across all 16 command files; …",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:44:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfba4c5313df3fca3aeb4a6d7746a1ae4d7dd5fb",
          "body": "# [2.6.0-next.20](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.19...v2.6.0-next.20) (2026-07-16)\n\n### Bug Fixes\n\n* entry-types list — renderingJson/capabilitiesJson field names, add isSystem, empty when null ([ea2722c](https://github.com/inneropen/marvin-cli/commit/ea2722ca22f5dec4ad537359f310525f259cb41f))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.20 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:39:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea2722ca22f5dec4ad537359f310525f259cb41f",
          "body": "…dd isSystem, empty when null",
          "is_bot": false,
          "headline": "fix: entry-types list — renderingJson/capabilitiesJson field names, a…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:39:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd2316074895b0332178b1b6f951295ed9212130",
          "body": "# [2.6.0-next.19](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.18...v2.6.0-next.19) (2026-07-16)\n\n### Bug Fixes\n\n* camelCase column specs in email-subscriptions list; default recipient_type to admins ([7b1d3d7](https://github.com/inneropen/marvin-cli/commit/7b1d3d7f6a5badbd51e283e3421e00ef8930706f))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.19 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:36:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b1d3d7f6a5badbd51e283e3421e00ef8930706f",
          "body": "…pient_type to admins",
          "is_bot": false,
          "headline": "fix: camelCase column specs in email-subscriptions list; default reci…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:36:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03d8cf066bb7ad311d3c8025f4b35762f1265f70",
          "body": "# [2.6.0-next.18](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.17...v2.6.0-next.18) (2026-07-16)\n\n### Bug Fixes\n\n* machine-mode errors to stdout (json/yaml/csv all pipe cleanly to jq/yq) ([4fdd3b6](https://github.com/inneropen/marvin-cli/commit/4fdd3b6f732bda2a5a731144261b7ce899c4810a))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.18 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:26:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fdd3b6f732bda2a5a731144261b7ce899c4810a",
          "body": "… jq/yq)",
          "is_bot": false,
          "headline": "fix: machine-mode errors to stdout (json/yaml/csv all pipe cleanly to…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:26:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91dd384e82a087ad2f1e3210dd7dcbe757c96c3a",
          "body": "# [2.6.0-next.17](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.16...v2.6.0-next.17) (2026-07-16)\n\n### Bug Fixes\n\n* global structured error output matching --json/--yaml/--csv flags; slug normalization ([9b77358](https://github.com/inneropen/marvin-cli/commit/9b7735844a3b39b2dc8c3a1ba4\n[…]\nns, events, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership ([59ec311](https://github.com/inneropen/marvin-cli/commit/59ec3110a89430952ac287dfd25e4ed43c2ffcc2))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.17 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:19:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b7735844a3b39b2dc8c3a1ba4af61bfb3b8da4e",
          "body": "…s; slug normalization\n\n- handleCommandError: respects output format flag for ALL commands\n  --json: stderr {\"error\":\"msg\",\"status\":N}\n  --yaml: stderr valid YAML error block\n  --csv/default: plain text or styled chalk\n- FastAPI 422 array detail rendered properly (was [object Object])\n- secrets + variables create: slug auto-normalized to UPPER_SNAKE_CASE",
          "is_bot": false,
          "headline": "fix: global structured error output matching --json/--yaml/--csv flag…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:19:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "650b26550d6a67f937c5dc397e5363d45c8211d8",
          "body": "…ents, webhook logs, workspace import/prefs, entry-type write ops, entry collection ops\n\nNew commands:\n- secrets list/get/slugs/reveal/create/update/delete\n- variables list/get/create/update/delete\n- email-subscriptions list/get/create/delete\n- webhooks log / webhooks logs <id>\n- workspace import --\n[…]\nreferences / workspace preferences update\n- entry-types create/update/delete\n- entries collections <id> / add-to-collection / remove-from-collection\n- tasks log\n- user profile update\n- event-log types",
          "is_bot": false,
          "headline": "feat: fill all CLI gaps — secrets, variables, email-subscriptions, ev…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:53:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59ec3110a89430952ac287dfd25e4ed43c2ffcc2",
          "body": "…, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: fill CLI gaps — secrets, variables, email-subscriptions, events…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:49:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57103e9ce543dab0b4d66a87603678240edc2ec7",
          "body": "…ma type errors\n\n- health.ts: raw fetch replaced with PlatformClient.app.health()\n- email-templates.ts: snake_case keys updated to camelCase (templateType, headerText etc)\n- forms.ts: getPublishedForm/submitForm now pass workspace slug (SDK signature fix)\n- webhooks.ts: updated to match new test() response shape {message}\n- workspaces.ts: null-safe slug access for setActive/getSiteToken\n- tokens.ts: integrationId now required in createApiToken payload",
          "is_bot": false,
          "headline": "fix: replace raw fetch in health command with SDK AppModule; fix sche…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75ee703ff84df65382e0e32544ce2e0f15b30af8",
          "body": "- Define EntryLike, CollectionLike, ResourceLike, AssetLike interfaces\n  for column specs instead of MarvinEntry/MarvinCollection etc. — allows\n  CollectionEntry, Entry, PublishedCollectionSummary etc. to flow through\n  without casts\n- collection <slug> now builds output from Collection class getter\n[…]\nh a Slug column\n  instead of misusing entryColumns on non-entry data\n- entry <slug> uses toJSON() instead of broken Entry[] cast\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Properly type column specs and fix collection <slug> entries shape",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T23:41:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb43dc67e4b499339d8f94448927c2a3b3b0fc4a",
          "body": "# [2.6.0-next.16](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.15...v2.6.0-next.16) (2026-07-14)\n\n### Bug Fixes\n\n* Render single items as table rows, not raw JSON objects ([8bf2e8b](https://github.com/inneropen/marvin-cli/commit/8bf2e8bf80c7f2ac41bb0cd414266338bceab894))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.16 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:38:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bf2e8bf80c7f2ac41bb0cd414266338bceab894",
          "body": "collection, resource, asset single-item commands now use renderList\nwith column specs in table/CSV mode. JSON and YAML still return the\nfull object. Also fixes renderData fallthrough to console.dir which\nwas producing JSON-like output in table mode.\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Render single items as table rows, not raw JSON objects",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:38:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3f0c52a4de4f54d5813ba41d556dc8a2635dab20",
          "body": "# [2.6.0-next.15](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.14...v2.6.0-next.15) (2026-07-14)\n\n### Features\n\n* Persist apiUrl in credentials, consistent empty output across all modes ([97a27f0](https://github.com/inneropen/marvin-cli/commit/97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.15 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:35:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e",
          "body": "…ll modes\n\n- Save apiUrl to ~/.marvin/credentials.json on login so marvin works\n  outside any project directory without MARVIN_API_URL env var\n- --api-url flag is now read from global opts in login command\n- Empty list results: --json returns [], --yaml returns [], --csv shows\n  headers only, table \n[…]\ne,\n  asset, and collection commands\n- renderJson falls back to [] for undefined data (was 'undefined')\n- renderList is null-safe\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Persist apiUrl in credentials, consistent empty output across a…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:34:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b88b0eaf04e21853bba5217def0880232df22bb",
          "body": "# [2.6.0-next.14](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.13...v2.6.0-next.14) (2026-07-14)\n\n### Features\n\n* Auth-aware CLI — site-token login, command visibility, credential precedence ([34dce56](https://github.com/inneropen/marvin-cli/commit/34dce565073f05742d5edac2dae6437aa89bbe58))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.14 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:11:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34dce565073f05742d5edac2dae6437aa89bbe58",
          "body": "…al precedence\n\n- marvin login accepts --site-token with live validation against publish API\n- marvin logout --site-token/--all/bare for scoped credential clearing\n- marvin --help shows auth status line and hides commands based on token availability\n- workspace hidden when no user token; slug passable via --workspace or env\n- Site token precedence: CLI flag > stored credentials > env var\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Auth-aware CLI — site-token login, command visibility, credenti…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:11:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "41b3125e71380d8e4c9dbc6b5e2f5a80fe6c6265",
          "body": "# [2.6.0-next.13](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.12...v2.6.0-next.13) (2026-07-14)\n\n### Bug Fixes\n\n* Return empty array instead of [null] when slug not found ([96cdb88](https://github.com/inneropen/marvin-cli/commit/96cdb88eb5deccfb71e8875d544a6f5800ed9ece))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.13 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T04:39:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96cdb88eb5deccfb71e8875d544a6f5800ed9ece",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Return empty array instead of [null] when slug not found",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T04:38:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5e44dfcd9d3852516ee3bfb0213be204fa94f05d",
          "body": "Document the marvin publish renderers command with --all flag and\nisRendered filtering behavior.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Add publish renderers command documentation",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T22:40:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2ac42242ed8521ccf93c53882e12ba9b7e26c6cd",
          "body": "# [2.6.0-next.12](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.11...v2.6.0-next.12) (2026-07-12)\n\n### Bug Fixes\n\n* Update marvin-sdk dependency to next.20 with renderers rename ([fe591f6](https://github.com/inneropen/marvin-cli/commit/fe591f687e79665f6ae4728bef8d09ea9e4d8ceb))\n\n### Fe\n[…]\n875fcd1d38286c8494112cc4f43c170d))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.12 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-12T20:29:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe591f687e79665f6ae4728bef8d09ea9e4d8ceb",
          "body": "The lockfile was pinned to next.18 which lacked the renderers module.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update marvin-sdk dependency to next.20 with renderers rename",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T20:29:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1",
          "body": "Command now shows only entry types with isRendered=true by default.\nUse --all to include non-rendered types. Renamed entryTypeColumns →\nrendererColumns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Rename publish entry-types → publish renderers, add --all flag",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T20:18:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a11126be875fcd1d38286c8494112cc4f43c170d",
          "body": "Adds `marvin publish entry-types` to list entry types with rendering\ninfo via the publishing API. Updates platform entry-types list to show\nrendering and capabilities columns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add publish entry-types command and update platform entry-types",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T19:33:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52ad904abd20dcb6de366a313c4a7854baaf6099",
          "body": "# [2.6.0-next.11](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.10...v2.6.0-next.11) (2026-07-11)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n\n### Features\n\n* Add workspace export command ([b6bce79](https://github.com/inneropen/marvin-cli/commit/b6bce79b592e36f556984b53d409b589604a74f8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.11 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T21:36:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d36285996b315c7d4e18433b99cf5025853cfab7",
          "body": "Fixes TypeScript error TS18047 after SDK update where collections.get()\ncan return null.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Add null check for collection.get() return value",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T21:35:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6bce79b592e36f556984b53d409b589604a74f8",
          "body": "Adds 'marvin workspace export' to download workspace data as JSON.\nSupports --output <file>, --include-system-types, and --no-pretty flags.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add workspace export command",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T21:35:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6794a4d4d04fe9418f8bd035fa6fef143cde8c8a",
          "body": "Documentation Updates:\n- Add MIGRATION.md - Comprehensive upgrade guide from v2.5.x\n- Add SECURITY.md - Security features and best practices\n- Add DOCUMENTATION_UPDATES.md - Summary of all changes\n- Update README.md - Security features, new command syntax, examples\n- Update CHANGELOG.md - Complete v\n[…]\n fixed (error messages, help text)\n\nBreaking changes, migration paths, and security improvements\nare now fully documented for v2.6.0 release.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Complete v2.6.0 documentation and fix command inconsistencies",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:29:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c09312724db60e43c7b1e4de85a5348f4bcc47b7",
          "body": "# [2.6.0-next.10](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.9...v2.6.0-next.10) (2026-07-11)\n\n### Bug Fixes\n\n* **quality:** Pin SDK version and add token validation (LOW priority) ([cbd1579](https://github.com/inneropen/marvin-cli/commit/cbd157941119c4fbed3ad604d4a51a41fa804fc9)), \n[…]\ninneropen/marvin-cli/issues/11) [#12](https://github.com/inneropen/marvin-cli/issues/12) [#4](https://github.com/inneropen/marvin-cli/issues/4) [#13](https://github.com/inneropen/marvin-cli/issues/13)",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.10 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T17:04:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5af2dcd1079d35fe9dddacc8b5b214d81e9b9ec9",
          "body": "Complete documentation of security audit and remediation:\n- 17 issues identified (4 CRITICAL, 6 MEDIUM, 7 LOW)\n- 15 issues fixed (88% resolution rate)\n- Risk level: HIGH → LOW\n- Production ready\n\nFiles changed: 21 (7 new docs, 14 modified source)\nLines: +2,200 added, -70 removed\n\nExecutive summary for stakeholders and deployment checklist.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Add comprehensive security audit summary",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:04:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cbd157941119c4fbed3ad604d4a51a41fa804fc9",
          "body": "LOW-priority quality improvements:\n\nIssue #16: SDK dependency pinned to specific version\n- Changed from \"develop\" branch to \"^2.0.1\"\n- Provides supply chain predictability\n- Allows semver patch/minor updates\n- Works with package-lock.json\n\nIssue #17: Login token validated before saving\n- Calls clien\n[…]\n test coverage: recommendations provided\n\nFiles changed: 3 (2 modified, 1 new doc)\nResolution: 15/17 issues fixed (88%)\nFinal risk level: LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): Pin SDK version and add token validation (LOW priority)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:00:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "00ab45756a53bdabe91a22813402dca076834d1c",
          "body": "# [2.6.0-next.9](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.8...v2.6.0-next.9) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Add input validation and fix error handling (MEDIUM priority) ([f1cc4d6](https://github.com/inneropen/marvin-cli/commit/f1cc4d6c5c44e19047d95743ca11c80a2c3b863d))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.9 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T16:54:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1cc4d6c5c44e19047d95743ca11c80a2c3b863d",
          "body": "…iority)\n\nMEDIUM-priority security improvements addressing 6 vulnerabilities:\n\n1. Path validation on --file option\n   - Validate file exists and is not a directory\n   - Warn when reading from sensitive paths (SSH keys, credentials)\n   - Prevent path traversal in automation scenarios\n\n2. Input valida\n[…]\nNew utilities:\n- src/shared/validation.ts - Comprehensive validation functions\n\nFiles changed: 9 (2 new, 7 modified)\nRisk level: MEDIUM → LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): Add input validation and fix error handling (MEDIUM pr…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T16:54:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06199021f39389d7cf131f8202a307efa08beb27",
          "body": "# [2.6.0-next.8](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.7...v2.6.0-next.8) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Eliminate critical credential exposure vulnerabilities ([a96a86a](https://github.com/inneropen/marvin-cli/commit/a96a86a4c7f4238828a14b6cbe05160daf5e0543)), closes [HI#priority](https://github.com/HI/issues/priority)",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.8 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T16:46:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a96a86a4c7f4238828a14b6cbe05160daf5e0543",
          "body": "CRITICAL security fixes addressing 4 HIGH-priority vulnerabilities:\n\n1. Password visibility in shell history\n   - Removed password CLI flags from change-password command\n   - Implemented secure interactive prompts with hidden input\n   - Added password confirmation to prevent typos\n\n2. Token exposure\n[…]\nactively (use --from-stdin for scripts)\n\nFiles changed: 9 (3 new, 6 modified)\nRisk level: HIGH → LOW\nSecurity posture: Significantly improved\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): Eliminate critical credential exposure vulnerabilities",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T16:45:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "abb1d9281dedeac652d84c8bf7c57286be6135df",
          "body": "## [2.6.1](https://github.com/inneropen/marvin-cli/compare/v2.6.0...v2.6.1) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([0acb56e](https://github.com/inneropen/marvin-cli/commit/0acb56e76a10b7b88f62f8324ef2e49f85849210))",
          "is_bot": false,
          "headline": "chore(release): 2.6.1 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:23:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0acb56e76a10b7b88f62f8324ef2e49f85849210",
          "body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use PUBLISHING_TOKEN parameter name",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:22:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87259d5be9a0644ee7dbab67839e592f93fba120",
          "body": "# [2.6.0-next.7](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.6...v2.6.0-next.7) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([1596319](https://github.com/inneropen/marvin-cli/commit/15963195450f0f2658d169abc55b44b10dc16db5))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.7 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:22:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15963195450f0f2658d169abc55b44b10dc16db5",
          "body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use PUBLISHING_TOKEN parameter name",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:22:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87a4827f5d06922aa5889dea743831b681f05005",
          "body": "# [2.6.0-next.6](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.5...v2.6.0-next.6) (2026-07-10)\n\n### Bug Fixes\n\n* Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter ([7f96be8](https://github.com/inneropen/marvin-cli/commit/7f96be883566fa00ee995e02b2846d5fa0825679))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.6 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cf235098decf42888c83b041c253c67229ed5c4",
          "body": "# [2.6.0](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0) (2026-07-10)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Adding deps to develop ([8a4fb5e](https:\n[…]\narvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:16:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f96be883566fa00ee995e02b2846d5fa0825679",
          "body": "The reusable workflow expects GITHUB_TOKEN as a secret parameter.\nExplicitly map the org-level INNEROPEN_IO_TOKEN to this parameter\ninstead of using secrets: inherit.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:16:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "954a7d54d5169ffd89d6049b6a2977b5a60b7163",
          "body": "# [2.6.0-next.5](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.4...v2.6.0-next.5) (2026-07-10)\n\n### Features\n\n* Add automatic publishing to inneropen.io ([4170b64](https://github.com/inneropen/marvin-cli/commit/4170b6479a97daa1bd9a83145df3e7f2ce205c76))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.5 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T16:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4170b6479a97daa1bd9a83145df3e7f2ce205c76",
          "body": "Add GitHub Actions workflow to automatically publish releases to the\nInnerOpen engineering site.\n\nWhen a release is published, this workflow:\n- Calls the reusable workflow in inneropen.io\n- Generates a markdown update with release details\n- Opens a pull request for human review\n- Labels it as automa\n[…]\nediting before publication and prevents duplicate posts\nfor the same version.\n\nRequires org-level secret INNEROPEN_IO_TOKEN to be configured.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add automatic publishing to inneropen.io",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T16:52:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c1679c213ce664066873cfbd4005951901104437",
          "body": "- Add mkdocs.yml with Material theme configuration\n- Add 38 documentation files across 6 sections\n- Add Getting Started guides (installation, quickstart, configuration)\n- Add 20 command reference pages (Publishing, Platform, Admin APIs)\n- Add usage guides (filtering, scripting, pipelines, CI/CD)\n- A\n[…]\nping)\n- Add GitHub Actions workflow for auto-deployment\n- Add requirements.txt for mkdocs dependencies\n- Update package.json with docs scripts\n\nTotal: 38 Markdown files with complete CLI documentation",
          "is_bot": false,
          "headline": "docs: Add comprehensive mkdocs documentation structure",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T14:27:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9776a0f2302d7572b47cd018f95cedd3b10bdfdc",
          "body": null,
          "is_bot": false,
          "headline": "docs: Add comprehensive mkdocs documentation structure",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T14:21:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a4e3d3959df4ef20b77f59d2ccbf67a28433cf8",
          "body": "# [2.6.0-next.4](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.3...v2.6.0-next.4) (2026-07-10)\n\n### Bug Fixes\n\n* Adding deps to develop ([8a4fb5e](https://github.com/inneropen/marvin-cli/commit/8a4fb5ed2c35d568e4fc50b2720ab2375b865546))\n\n### Features\n\n* Add Forms module to Platform CLI\n[…]\nli/commit/d5f52bad7ec1766ef3531f6026f03945a24bb449))\n* Add scheduled-tasks commands to platform CLI ([269523b](https://github.com/inneropen/marvin-cli/commit/269523b259e6161a5df11d755194792b6dc46fa5))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.4 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T02:48:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a4fb5ed2c35d568e4fc50b2720ab2375b865546",
          "body": null,
          "is_bot": false,
          "headline": "fix: Adding deps to develop",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:47:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5f52bad7ec1766ef3531f6026f03945a24bb449",
          "body": "- Implement forms CRUD commands (list, get, create, update, delete)\n- Add submissions command to view form submissions\n- Add Publishing API commands (get-published, submit)\n- Follow existing patterns from entries/collections modules",
          "is_bot": false,
          "headline": "feat: Add Forms module to Platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:41:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "269523b259e6161a5df11d755194792b6dc46fa5",
          "body": "- Implement 9 commands: list, get, create, update, delete, run, history, types, stats\n- Support filtering (enabled-only, failed-only)\n- Add quick enable/disable shortcuts\n- Support all output formats (table, json, yaml, csv)\n\nPart of scheduled tasks feature - CLI integration",
          "is_bot": false,
          "headline": "feat: Add scheduled-tasks commands to platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:01:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85908be53637a26f0ddd9ea5b220dece4746a678",
          "body": "# [2.6.0-next.3](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.2...v2.6.0-next.3) (2026-07-10)\n\n### Bug Fixes\n\n* Update email templates commands to match CLI patterns and fix type errors ([0153166](https://github.com/inneropen/marvin-cli/commit/01531668691cc60f1610c728fe46c3594b79ca96))\n\n### Features\n\n* Add email templates commands to marvin-cli ([709097b](https://github.com/inneropen/marvin-cli/commit/709097b96aa8c38f6bfd4881286fb5e646a7c65e))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.3 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T00:52:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01531668691cc60f1610c728fe46c3594b79ca96",
          "body": "…pe errors",
          "is_bot": false,
          "headline": "fix: Update email templates commands to match CLI patterns and fix ty…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T00:52:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "709097b96aa8c38f6bfd4881286fb5e646a7c65e",
          "body": "Add complete email template management commands to the CLI platform group.\n\nCommands:\n- marvin platform email-templates list - List all templates\n- marvin platform email-templates get <id> - Get template details\n- marvin platform email-templates create - Create new template\n- marvin platform email-t\n[…]\nated into platform command group alongside other workspace resources.\nNote: CLI has pre-existing TypeScript errors to be resolved separately.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add email templates commands to marvin-cli",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T00:40:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "532b0ce85e1df68f9e5b084061cb7fbd53abbb22",
          "body": "# [2.6.0-next.2](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.1...v2.6.0-next.2) (2026-07-09)\n\n### Bug Fixes\n\n* Call toJSON() on Collection objects before rendering ([c0942e6](https://github.com/inneropen/marvin-cli/commit/c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7))\n* Complete error ha\n[…]\narvin-cli/commit/728fca38ff97685bd0ebf38506d07bee1d1416ec))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.2 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-09T02:28:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42fc506af94f33baf9422c1101f38600e1ab0ff8",
          "body": "The dependency value should just be \"develop\", not the full package@tag.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use correct dist-tag format in CI workflows",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:28:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eeb2909c539cb1386bf3b3cad271819c079a3ad6",
          "body": "Use full package@tag format: @inneropen/marvin-sdk@develop\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Correct SDK dependency format in CI workflows",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:27:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f9e7c152d619a8c624fa0714ffc8f3cd22d6b87e",
          "body": "Replace file dependency with @develop dist-tag in CI workflows.\nThe file:../marvin-sdk dependency only works locally where both\nrepos are checked out side-by-side.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update GitHub Actions workflows to use published SDK",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:27:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "91da5ea5a129b30c2b2f482c28a3de313a3661bf",
          "body": "- Import Marvin error classes from main SDK package instead of core/errors\n- Fix collection entries command to use proper column spec format\n- Display order, ID, title, status, and published date for entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update error imports and collection entries display",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:22:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "728fca38ff97685bd0ebf38506d07bee1d1416ec",
          "body": "Display the order field as the first column when listing entries in a\ncollection, showing the sort_order from the collection relationship.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add order column to collection-entries command output",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:10:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1f630939e343535501162d87c52cb3d8376c4e58",
          "body": "Add CLI commands:\n- marvin collections entries <id> - list entries in order\n- marvin collections reorder <id> - bulk reorder entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add collection entries and reorder commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T01:32:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7",
          "body": "Fixed issue where 'marvin publish collection <slug>' was returning\nthe full Collection class with private MarvinHttpClient instead of\njust the collection data.\n\nChanges:\n- Call toJSON() on Collection objects before rendering\n- Applied error handler to all publish commands\n- Collections, assets, and resources now properly serialize\n\nBefore: Returns Collection { http: MarvinHttpClient {...}, ... }\nAfter: Returns clean JSON data object\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Call toJSON() on Collection objects before rendering",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:19:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "709ebce160f8af887e022f940ee18244d5749d4f",
          "body": "Replaced remaining console.error calls with handleCommandError\nfor consistent error messaging.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Complete error handling migration in auth commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:11:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ce20a2194f80117b002162912289e3b84f778ca8",
          "body": "Updated login and logout commands to use the new error handler\nfor consistent, helpful error messages across all CLI commands.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Apply error handling to auth commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:11:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b0f154b13c04430609df410821b9c481dbd5dc65",
          "body": "Created error-handler utility module with:\n- Specific handling for MarvinAuthError (401/403)\n- MarvinApiError with status code-based suggestions\n- MarvinConfigError for missing configuration\n- MarvinValidationError for input validation\n- Helpful suggestions for common errors:\n  * 401: Login expired \n[…]\nes.\nErrors now show:\n  ✗ Error Type (Status Code)\n  Helpful error message\n  Suggestions for resolution\n\nSupports DEBUG mode for stack traces.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add comprehensive error handling for CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:10:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c53b38ad8eca2a9d0313467919b7ae737225bd6c",
          "body": "- Created event-log command group with 4 subcommands:\n  - list: Query events with filtering by type, entity, user, date range\n  - get: Get single event by ID\n  - entity: Get complete event history for an entity\n  - user: Get activity history for a user\n- Added alias \"events\" for \"event-log\"\n- Integrated with EventLogModule from SDK\n- Full support for all filter parameters and pagination\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add event-log commands to Platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T21:23:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "db2b54b600df8ba9d2627fef2e0b8a059b85ec36",
          "body": "Changed @inneropen/marvin-sdk dependency from pinned version\nto 'develop' tag to automatically track latest develop branch.\n\nThis ensures CLI always uses the latest SDK features from develop.",
          "is_bot": false,
          "headline": "chore: Update SDK dependency to use @develop tag",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T19:02:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efed8ab053f716e6e710d2d7c670f18ba0d82006",
          "body": "Highlights the ability to create invitation tokens with specific workspace roles (VIEWER, AUTHOR, EDITOR, ADMIN, OWNER) using the --role parameter.",
          "is_bot": false,
          "headline": "docs: Add workspace roles feature to README",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T18:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb0357aa32c6840a429136133916bfbf1444fbc2",
          "body": "Updated to latest SDK with workspace role support.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Update SDK to 1.11.0-next.1 (develop tag)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T17:06:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "74cf439242229959794d276734832fe33c770c58",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Remove old publish workflow (replaced by semantic-release)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:52:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "46f8678eeef4e597934eacb4cbeaffd432ce317c",
          "body": "# [2.6.0-next.1](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0-next.1) (2026-07-08)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Update Node.js version to \n[…]\n/commit/d7247ed92540196c9b529f08ca93b96ad333229f))\n\n### Features\n\n* Add semantic-release automation ([5f199fa](https://github.com/inneropen/marvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.1 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-08T16:50:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c00de050fc79ae71d888a7c97fb1c58d1a180a96",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Add npm-production environment to release workflow",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d7247ed92540196c9b529f08ca93b96ad333229f",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update Node.js version to 22.14 in release workflow",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:45:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5f199faba7dc72d8caa2800fba75f7200ade118b",
          "body": "- Automatic versioning based on conventional commits\n- Publish @next tag from develop branch\n- Publish stable releases from main branch\n- Auto-generate CHANGELOG.md\n- Create GitHub releases with release notes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add semantic-release automation",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:42:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f1b9035b83fc9db4e06948f0407b6c79ce7b4e52",
          "body": null,
          "is_bot": false,
          "headline": "2.5.7",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cfa4dcef7d0fbfa811728a5cafce7047c24ffb6",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Update SDK to 1.10.6 for workspace role support",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:36:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f3a7bb71081ab69a428944c1df6b197ed5935d8",
          "body": "- Added --role option to 'platform invites invite' command\n- Supports all workspace roles: VIEWER, AUTHOR, EDITOR, ADMIN, OWNER\n- Display workspace role in list and create outputs\n- Default role is EDITOR\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add --role option to invites command",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "adff6333cf952224c1caa331bce1addec31378d2",
          "body": "Updates SDK to include fixed auth endpoints and registration schema.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.6 with SDK 1.10.4",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T15:11:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e4ab7bdf3e11e033f76b50efd5bca5497c769ed",
          "body": "Updates SDK to fix invitation URL generation (now uses frontend URL).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.5 with SDK 1.10.3",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:57:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "057b4f77806a2e6d9e4466c865a29e733ec7775f",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.4",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:48:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ded989ce7e4ac402f612c40b00fc9b4e754d6a1b",
          "body": "Fixes 'Unknown' creation date by checking both camelCase and snake_case\nfield names from API response.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Handle both createdAt and created_at in invite token display",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:48:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ecd671ab5d9e63c635dc097cb8d57728f241f2ae",
          "body": "Updates to marvin-sdk@next (v1.10.2) which includes invites API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.3 for SDK 1.10.2 compatibility",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:41:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "579fa1687c3d9ca97c25803ec7d3398eade3d471",
          "body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- invite [--email] - Create token and optionally send email\n  - Without --email: just shows the link to copy/paste\n  - With --email: sends email and shows link as backup\n- link --token - Generate URL from existing toke\n[…]\nexample.com  # Send email\n  marvin platform invites list\n  marvin platform invites revoke --id <id> --yes\n\nTested and working with local API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add platform invites CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:27:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "537fcdbd312cce430b85825ed86d4786f22a14b1",
          "body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- create - Create a new token (shows link)\n- invite [--email] - Create token and optionally send email\n  - Without --email: just shows the link to copy/paste\n  - With --email: sends email and shows link as backup\n- lin\n[…]\nlatform invites invite --email user@example.com  # Send email\n  marvin platform invites list\n  marvin platform invites revoke --id <id> --yes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add platform invites CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:13:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c05ab29291aa4fe89b4c0349aabdfec231a9d61",
          "body": null,
          "is_bot": false,
          "headline": "Merge main into develop - take main version for conflicts",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T08:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ce90ef44a76e9c18892945926afbc7035d090b3",
          "body": null,
          "is_bot": false,
          "headline": "chore: Bump version to 2.2.2",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T04:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 26,
      "commits_last_year": 148,
      "latest_release_at": "2026-07-19T00:30:39Z",
      "latest_release_tag": "v2.7.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.5
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@inneropen/marvin-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "marvin",
            "cms",
            "cli",
            "publishing",
            "headless-cms"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inneropen/marvin-cli",
          "is_deprecated": false,
          "latest_version": "2.7.0",
          "repository_url": "https://github.com/inneropen/marvin-cli",
          "versions_count": 47,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 6692,
          "first_published_at": "2026-07-07T00:31:28.888000Z",
          "latest_published_at": "2026-07-19T00:30:38.987000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 13750,
      "source_files_sampled": 67,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json",
        "requirements.txt"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 5,
        "malicious_count": 0,
        "assessed_package": "npm:@inneropen/marvin-cli@2.7.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "@inneropen/marvin-sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.2.0-next.23"
        },
        {
          "name": "chalk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.2"
        },
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        },
        {
          "name": "dotenv",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^16.4.5"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "semantic-release-bot",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
        },
        {
          "type": "User",
          "login": "jmashburn",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/231223?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.788
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "docs.yml",
        "publish-release.yml",
        "release.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 1,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/2 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
        "ran_at": "2026-07-24T13:15:21Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T00:30:05Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InnerOpen/marvin-cli",
    "host": "github.com",
    "name": "marvin-cli",
    "owner": "InnerOpen"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 53,
        "vitality": 74,
        "community": 32,
        "governance": 54,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 148,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "148 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 148
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 26,
              "latest_release_tag": "v2.7.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "26 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 26
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "packages": [
                "@inneropen/marvin-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 6692
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "6,692 downloads/month across npm",
                "points": 51,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 6692,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.788
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 79% of commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 79
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "InnerOpen",
              "public_repos": 8,
              "account_age_days": 31
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of InnerOpen",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "InnerOpen"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "8 public repos, account ~0 yr old",
                "points": 7.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 8
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@inneropen/marvin-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "47 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@inneropen/marvin-cli@2.7.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@inneropen/marvin-cli@2.7.0",
                  "assessed": 5
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 5,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 5,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 55,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.94,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.47,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "47 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 47,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 13750,
              "source_files_sampled": 67,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/67 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 67,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T13:15:37.615701Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InnerOpen/marvin-cli.svg",
  "full_name": "InnerOpen/marvin-cli",
  "license_state": "absent",
  "license_spdx": null
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistikennpm.