InsForge / insta-cli

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Die Installation von npm:insta@0.0.22 zieht 1 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 308,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 10291,
        "JavaScript": 16821,
        "TypeScript": 169762
      },
      "pushed_at": "2026-07-27T15:36:05Z",
      "created_at": "2026-06-29T02:55:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-25T11:01:14Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://insforge.dev",
      "name": "InsForge",
      "type": "Organization",
      "login": "InsForge",
      "company": null,
      "location": "United States of America",
      "followers": 184,
      "avatar_url": "https://avatars.githubusercontent.com/u/198419463?v=4",
      "created_at": "2025-02-09T04:44:27Z",
      "is_verified": null,
      "public_repos": 29,
      "account_age_days": 533
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.22",
          "kind": "patch",
          "published_at": "2026-07-21T01:53:33Z"
        },
        {
          "tag": "v0.0.21",
          "kind": "patch",
          "published_at": "2026-07-17T15:06:48Z"
        },
        {
          "tag": "v0.0.20",
          "kind": "patch",
          "published_at": "2026-07-17T00:39:05Z"
        },
        {
          "tag": "v0.0.19",
          "kind": "patch",
          "published_at": "2026-07-15T15:36:59Z"
        },
        {
          "tag": "v0.0.18",
          "kind": "patch",
          "published_at": "2026-07-15T14:50:53Z"
        },
        {
          "tag": "v0.0.17",
          "kind": "patch",
          "published_at": "2026-07-15T14:24:36Z"
        },
        {
          "tag": "v0.0.16",
          "kind": "patch",
          "published_at": "2026-07-15T14:13:01Z"
        },
        {
          "tag": "v0.0.15",
          "kind": "patch",
          "published_at": "2026-07-15T13:29:11Z"
        },
        {
          "tag": "v0.0.14",
          "kind": "patch",
          "published_at": "2026-07-15T09:25:02Z"
        },
        {
          "tag": "v0.0.13",
          "kind": "patch",
          "published_at": "2026-07-15T01:52:59Z"
        },
        {
          "tag": "v0.0.12",
          "kind": "patch",
          "published_at": "2026-07-15T01:42:35Z"
        },
        {
          "tag": "v0.0.11",
          "kind": "patch",
          "published_at": "2026-07-12T10:53:34Z"
        },
        {
          "tag": "v0.0.10",
          "kind": "patch",
          "published_at": "2026-07-12T10:26:49Z"
        },
        {
          "tag": "v0.0.9",
          "kind": "patch",
          "published_at": "2026-07-12T10:08:40Z"
        },
        {
          "tag": "v0.0.8",
          "kind": "patch",
          "published_at": "2026-07-12T10:00:59Z"
        },
        {
          "tag": "v0.0.7",
          "kind": "patch",
          "published_at": "2026-07-12T09:32:38Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-07-09T01:01:30Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-07-04T19:22:16Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-07-04T04:52:38Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-07-03T18:40:58Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f2dac1ce558652668ab38716ce6b37fb2a13e4b5",
          "body": "fix(observe): no-op the Claude hook when .insta/observe/hook.js is absent",
          "is_bot": false,
          "headline": "Merge pull request #40 from InsForge/fix/observe-hook-guard",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-25T11:00:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "653c2425ddc0e3eeede5e72dbc2c4f1bf837b3ec",
          "body": "insta logs --deploy (compute deploy events)",
          "is_bot": false,
          "headline": "Merge pull request #64 from InsForge/feat/compute-deploy-events",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-24T21:32:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fcfd0bb5ac85bcb3a275aaceae3cd676b21f1e6",
          "body": null,
          "is_bot": false,
          "headline": "feat(logs): --deploy flag to fetch compute deploy events",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-24T20:39:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "658aac3809d61b0c005ddffb37e3e6b71f531eff",
          "body": "feat: add service rename command",
          "is_bot": false,
          "headline": "Merge pull request #62 from InsForge/feat/service-rename",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:13:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95d960e280c5c0c9522fc4399828e15678189c14",
          "body": null,
          "is_bot": false,
          "headline": "Merge origin/main into feat/service-rename",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:12:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98fe669a0970381b0cac0f10485e30ebddd9a9ac",
          "body": "feat: services add --region + insta regions",
          "is_bot": false,
          "headline": "Merge pull request #61 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:11:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "432213df06fdab4614b9cbf39e169f8394342956",
          "body": "…--port)\n\nBoth PRs extended 'services add': #61 added --region + client-side region\nguard; #63 (on main) added --image/--port + servicesAddRequestBody.\nResolved by folding region into servicesAddRequestBody and the servicesAdd\nvalidation/output; dropped the now-redundant buildAddServiceBody + its test,\nmoved region coverage into test/services.test.ts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/main into devel: unify services add (--region + --image/…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:09:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fea548ec70c1b6e8bbe1749913a6e3144c588d15",
          "body": "services add compute --image/--port (create-with-image CLI)",
          "is_bot": false,
          "headline": "Merge pull request #63 from InsForge/feat/compute-service-image",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:02:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd3f5fe318faa93a88eecbb49583a13b1d3bb7d9",
          "body": "… list\n\nservices add <compute> <name> now accepts --image <url> and --port <n>,\nforwarded to POST /projects/:id/services as image/port. Both are rejected\nclient-side for non-compute types (mirrors the existing --public/storage-only\ncheck), throwing before any network/config access. Extracted\nservice\n[…]\ned without mocking the API client.\n\nservices list now shows the running image (and port, if any) on compute\nrows via a new serviceListLine helper, extracted for the same reason\n(mirrors billingLines).",
          "is_bot": false,
          "headline": "feat(services): --image/--port on services add; show running image in…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T23:51:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7c3e68e73b9b2020306c19a8fd4bc1c5132b0ba",
          "body": null,
          "is_bot": false,
          "headline": "feat(services): add rename command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T23:12:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59362f4812c4389a6dc6bb9066dcb6b274dc64a5",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): validate services-add flags before network/project resolution",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T22:49:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "02aee9f783dc30f12b85fdbffa5d7ba2a2e8ee23",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): services add --region + insta regions command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T22:43:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "257311d3ebe342350f67b539202cadab7f0ada75",
          "body": "bump version to 0.0.22",
          "is_bot": false,
          "headline": "Merge pull request #60 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f10b20c73f2c3cdfb774a5d4d099833580192ea1",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.0.22",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:42:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9944f8ef38d195f8f826aea9b8f35056bcd43f",
          "body": "Secret ⇄ service binding (CLI)",
          "is_bot": false,
          "headline": "Merge pull request #59 from InsForge/feat/secret-service-binding",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:35:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eafb706a3d8ce641e62ee5ce60be1ed6ae2d920f",
          "body": "… secrets\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(secrets): --service on set; grouped list; secrets tree; services…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T21:25:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "975e08079a71e5347a81c4f1ece0a275cd4d2223",
          "body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "bump version to 0.0.21 (#58)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-17T15:05:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "61ae3ab4d86a8d52944ea359b476b3b5066296f4",
          "body": "…setup agent (#57)\n\n* feat(setup): register the insta-cloud remote MCP server during `insta setup agent`\n\nRailway-parity: after the user-global skill install, setup now also registers\nhttps://mcp.instacloud.com/mcp with Claude Code (--transport http --scope user),\nauthenticated by a durable insta_ A\n[…]\n only when the table is\nabsent; idempotent re-runs report already-configured.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(setup): register the insta-cloud remote MCP server during insta …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-17T15:01:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "af36fa32ed2dcfb79947edaa75678c7b4720f987",
          "body": "bump version to 0.0.20",
          "is_bot": false,
          "headline": "Merge pull request #56 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T00:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d6c6324014756d5ff262a24d1944061f7cc4d5e",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.0.20",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T00:30:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26b590ff52266be3138432a5b9ff29df9ad19626",
          "body": "Branch-scoped services: --branch flags + insta branch merge",
          "is_bot": false,
          "headline": "Merge pull request #55 from InsForge/feat/branch-scoped-services",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:49:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8798a45e42f202e3ea7c13ef8bdf8c3d6e375233",
          "body": "- register --branch on compute start/stop/suspend/status (was consumed by\n  LifeOpts but never registered → \"unknown option\") and on services\n  scale/upgrade (now accept opts.branch ?? p.branch)\n- branchMerge: default target to opts.into ?? p.branch (drop hardcoded\n  'main'); guard the created/skipp\n[…]\nort q() from services.ts and reuse it in compute.ts\n\ntypecheck + build clean; 79 tests pass; --branch verified on compute + scale.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): address PR #55 review feedback",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:48:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "814ed5166e9b1cea5f3a424af12515de3d2c64da",
          "body": "Resolve conflicts combining --branch/branch-merge with PR #54 (storage\n--public + services set-access):\n- servicesAdd carries both --branch and --public (POST body branch+public;\n  output shows branch + storage access label)\n- services add/list/remove keep --branch; add keeps --public; set-access\n  \n[…]\n public/private + stays branch-scoped\n- policy set description includes service.setAccess\n\ntypecheck + build clean; 79 tests pass.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/main into feat/branch-scoped-services",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:44:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a686c857f134bf7a51a3f96d128fd58486d682a0",
          "body": "Structurally merges source's services into target (default: current\nbranch) via POST /projects/:id/branches/:branch/merge. Prints the\nplatform's per-item skip reason (exists|cap|secret-collision) instead\nof a generic message.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(branch): insta branch merge <source> --into <target>",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T22:47:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "223da153c9f8c26510693b45d9a34be388192840",
          "body": "…n current branch\n\nThreads --branch through `services add|list|remove` (default: current linked\nbranch), branch-scopes the GET /services list used by `services scale|upgrade`\nand by compute lifecycle (start/stop/suspend/status), so resolveServiceId /\nresolveComputeServiceId resolve against the right\n[…]\nnscoped list. deploy.ts already resolved its branch directly in the\nrequest body (no /services fetch to scope), so it's unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(services): --branch on add/list/remove; resolve compute/deploy o…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T22:42:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ad59d7c73962185f1e0f0459ea596715f8c88b1",
          "body": "feat(services): --public flag + services set-access command",
          "is_bot": false,
          "headline": "Merge pull request #54 from InsForge/feat/storage-public-bucket",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T18:40:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "855c81a9eb96a4d5f10091d9a8d3ad29320a8627",
          "body": "- `insta services add storage <name> --public` (storage only; rejected elsewhere)\n- `insta services set-access storage <name> public|private`\n- `services list` shows public/private for storage services\n- policy help lists the new service.setAccess action\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(services): --public on add + `services set-access` command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T18:32:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "40dc5c7b0abfbbc62dfdfdf636d82beca2c491ba",
          "body": "…(#53)\n\nShips PR #52.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.19 (quiet per-project skill install in project create) …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T15:36:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6c23c7e30622fd786aa69b17ee4ed87044a4c72",
          "body": "…ck UI (#52)\n\ninsta project create shells npx skills add for the stack skills (insta,\nneon-postgres, tigris, better-auth) with stdio='inherit' — dumping the same\nclone-spinner/banner noise we already removed from insta setup agent. Run it\nsilent instead; the per-skill ✓/failed line is the clean outp\n[…]\n…\n  insta ✓\n  neon-postgres ✓\n  tigris ✓\n  better-auth ✓\n\n77/77 green.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): don't stream the per-project skill install's cla…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T15:32:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c0bcd5fa123879ab87e0a691e2c8580ece377f87",
          "body": "…(#51)\n\nShips PR #50.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.18 (project create guides instead of inventing a name) …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:49:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3a79323f0c21c49bf3c63719de0fc069d8a85aeb",
          "body": "…ed project (#50)\n\nFollow-up to the no-prompt fix. Bare `insta project create` in a generic dir\n(~/projects, /tmp, the home dir) previously auto-generated a random name and\nprovisioned real postgres/storage/compute under it — surprising for a bare\ncommand. Now it guides instead:\n\n  name your project\n[…]\ns string|null (null = guide); removed the name generator. 77/77 green.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): guide to name it instead of inventing a junk-nam…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:46:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "01887c81b3d78601ad215051b1c42ad8bc93ab9b",
          "body": "Ships PR #48: fresh installs default to the instacloud.com brand domain instead\nof the legacy beta-api.insta.insforge.dev host.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.17 (default cloud API = api.instacloud.com) (#49)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:23:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7f8cec78ded3d0ab5f40815695ff0aa5f9c4eea2",
          "body": "…-api.insta.insforge.dev) (#48)\n\nOnboarding is agents.instacloud.com but the CLI's hardcoded DEFAULT_API still\npointed at the legacy beta host beta-api.insta.insforge.dev — so a fresh install\ntalked to an insforge.dev domain, not the instacloud.com brand. Verified same\nbackend: identical 401 {\"error\n[…]\nogin) or INSTA_API_URL\nstill wins, so existing logins are undisturbed.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): default cloud API to api.instacloud.com (not legacy beta…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:20:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "caf94eec4fc6a8ed60dcfc4ea7f1aefef00932c7",
          "body": "Ships PR #46: insta project create auto-generates a friendly name instead of\nhanging on an interactive prompt.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.16 (project create never prompts for a name) (#47)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:12:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dfd013a602e5b6cfb564419c8b3d31d48ebbb490",
          "body": "…n the dir name is useless (#46)\n\n`insta project create` (no arg) dropped into an interactive `project name [projects]:`\nprompt — so `curl … | sh && insta project create` and any run from ~/projects just\nHANGS, with a nonsense default (the cwd basename 'projects'). Railway-grade onboarding\nshouldn't\n[…]\nme later if you want something specific. 77/77 tests green, tsc clean.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): never block on a name prompt — auto-generate whe…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:09:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "398c5e49a0f23804c8c1396031ab83216f045975",
          "body": "… PATH warning) (#45)\n\nShips PR #44 in the binary: stdin='ignore' so the piped install script's\nGet-started guidance is no longer eaten; false 'another insta on PATH' warning\nsuppressed for our own symlink; '(~20s)' label dropped.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.15 (onboarding: guidance prints under curl|sh, no false…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T13:28:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "94901fc476738777bc3ac10178d779269f6426e0",
          "body": "…ipt; drop false PATH warning + '(~20s)' (#44)\n\nThree onboarding papercuts surfaced comparing `curl agents.instacloud.com | sh`\nto Railway's:\n\n1. The 'Get started' guidance never printed under `curl | sh`. `insta setup\n   agent` spawned `npx skills` with stdin='inherit'; since the piped install\n   s\n[…]\n now know InstaCloud — just ask them').\n\n75/75 tests green, tsc clean.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(onboarding): stop skill-install from eating the piped install scr…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T13:23:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "715fe33c5bda58b7d2b5d0302526c6f23c2d7d8b",
          "body": "Ships the captured-and-summarized skill-install output (PR #42) in the binary.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.14 (Railway-clean onboarding output) (#43)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T08:30:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1568cc775c8f779cc5a6b7747200ec77fabdb210",
          "body": "…, don't stream it (#42)\n\n* fix(install): symlink into an on-PATH dir so `insta` runs immediately\n\nRoot cause of 'command not found: insta' after the one-liner: we installed\nonly to ~/.insta/bin (never on PATH), so the recommended\n'curl … | sh && insta project create' chain called insta in a shell w\n[…]\nreen.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(setup): Railway-clean onboarding output — summarize skill install…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T08:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa5bdadb7df39cd8ef28336f652b7b07ab5534bd",
          "body": "… (#41)\n\nRoot cause of 'command not found: insta' after the one-liner: we installed\nonly to ~/.insta/bin (never on PATH), so the recommended\n'curl … | sh && insta project create' chain called insta in a shell whose\nPATH the piped script can't change. Railway avoids this by installing where\nPATH alre\n[…]\n fresh install → 'command -v insta' resolves,\nv0.0.13, no manual step.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(install): symlink into an on-PATH dir so `insta` runs immediately…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T07:33:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4a9875f1eb0391d1ed226c279c36305f73b42726",
          "body": "docs: AGENTS.md + CLAUDE.md; enrich developing-insta-cli",
          "is_bot": false,
          "headline": "Merge pull request #35 from InsForge/docs/claude-dev-skills",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T02:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b6d7fe49ad48e8e36bca437efde0d2b961cc518",
          "body": "Split repo-local agent notes into AGENTS.md (read by Claude Code, Codex, and other AGENTS.md-aware tools); CLAUDE.md imports it via @AGENTS.md, matching the frontend/ convention. The developing-* skill stays in .claude/skills/ (Claude Code's skill dir); AGENTS.md points to the SKILL.md file so other agents can read it directly.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: move always-on notes to AGENTS.md; CLAUDE.md -> @AGENTS.md",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T02:01:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4b52fd016e5b48057bb675b54492776722680e2f",
          "body": "…sent\n\n.claude/settings.json is often committed while ./.insta stays local-only,\nso a fresh clone (cloud code session, teammate checkout) gets the observe\nhook registered without the script. Every tool call then fails with\n'PostToolUse hook error: node:internal/modules/cjs/loader:1386'\n(MODULE_NOT_F\n[…]\n command on file existence so those\ncheckouts no-op instead of erroring.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_015PdkPrifSPAYEEX4QF89z4",
          "is_bot": false,
          "headline": "fix(observe): no-op the Claude hook when .insta/observe/hook.js is ab…",
          "author_name": "yaowenc2",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:57:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6b29c3bdb4fe5b58f4a282743707d10c0e949432",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.13 — gzipped binaries (~20MB) + install progress (#39)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:51:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "689ce59c7e19d840046c4b692e3acfea946ed0cf",
          "body": "… (#38)\n\nBun --compile embeds the full runtime, so each binary is ~60MB — the\ndownload looked frozen and was slow. release.yml now gzips the unix\nbinaries (Bun compresses ~3×); install.sh fetches <asset>.gz and gunzips,\nwith a raw-binary fallback for older releases. Checksums cover the\nDECOMPRESSED \n[…]\nxe stays raw (manual download). Verified the gzip→verify flow\nlocally.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(install): gzip binaries (~60MB → ~20MB) + progress already shown…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:51:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c9abc40a0dbfa97175e358a6e2a294a50460793b",
          "body": "install.sh downloaded the ~60MB Bun binary with 'curl -fsSL' (silent), so\nafter 'Installing insta…' it showed nothing for the whole download and read\nas a hang (user report). Now --progress-bar to a TTY (quiet when piped\nwithout one), and the message states the size.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(install): show download progress — 60MB binary looked frozen (#37)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:48:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d445b2f55e8ff12b07a8c34eb06d491dc7adc576",
          "body": "Ships: optional project-create name (paste-runnable one-liner, #34),\nnext-action Next: hints (#32), insta compute start/stop/suspend/status\nlifecycle commands, agents.instacloud.com canonical docs (#31).\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.12 (#36)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:41:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7507d327ee47850be5a9798e3410679d1d90dec1",
          "body": "… paste-run (#34)\n\nThe console's empty-state onboarding recommended\n'curl … | sh && insta project create <app-name>', but the <app-name>\nplaceholder is unrunnable: zsh reads <…> as redirection → 'parse error\nnear \\n'. The RECOMMENDED command couldn't be pasted. Name is now\noptional: explicit arg win\n[…]\no 'insta project create'\nruns clean. TDD: slugify + resolver, 4 cases.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: insta project create name is optional — recommended one-liner is…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:26:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51387c807574d813a2902f759189447c9133cbea",
          "body": "Add a repo-local CLAUDE.md (always-on rules + pointer to the skill) and\nfold a src/ architecture map + the cli-reference.md sync rule into the\nexisting developing-insta-cli skill.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add CLAUDE.md; enrich developing-insta-cli with src/ architecture",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T01:17:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e2b6cd459be1955b7d5835bb928b8be6247d9ea",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #33 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T21:12:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80da15e6e619c6af9f17f771e7c69c9dc3b002ba",
          "body": "feat(nextactions): send Insta-Hints and render Next: affordance",
          "is_bot": false,
          "headline": "Merge pull request #32 from InsForge/feature/next-actions",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T21:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6d4949add5963214965c066c317b93fd905c317",
          "body": null,
          "is_bot": false,
          "headline": "fix(nextactions): render metrics/logs hints with the compute target",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T18:45:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a985c4adb19b2941ab1d4bc5b8a3fb489f7b6906",
          "body": null,
          "is_bot": false,
          "headline": "feat(nextactions): send Insta-Hints and render Next: affordance",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T18:33:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfbaf53ba796e5b1e9c9e3fe80dcd7ac378b5efd",
          "body": "CloudFront edge cache of agents.sh (rate-limit-proof vs raw.github);\nraw URL stays documented as the transparent fallback. Repo skill gains\nthe cache-invalidation note per its keep-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: agents.instacloud.com is the canonical onboarding one-liner (#31)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-14T01:02:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d2d2b8b62f6d7399958c805184218336908a14f7",
          "body": "Adds resolveComputeServiceId (services.ts) — resolve by name, or the\nsole compute service in the project when name is omitted — and four\nlifecycle subcommands wired into the existing `compute` group:\nstart/stop/suspend (mutating, via rawRequest + handleApproval, gated\nfor future-proofing) and status (plain read via request).",
          "is_bot": false,
          "headline": "feat(cli): insta compute start/stop/suspend/status",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T00:25:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32d51663086bd702089cf0c8e8ad83234511af62",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.11 — Railway-grade install moment (#30)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:52:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "04a65dff4afe60d60a0d2373c4c8ff6ce31b666e",
          "body": "install.sh: skips the download when the installed binary already matches\nthe latest release, warns when another insta shadows ours on PATH (with\nnpm-specific advice), and ends with the 3-command get-started (create →\ndeploy → branch = the isolated-clone wow). setup agent: filters the skills\ntool's e\n[…]\nred noise (real\nfailures still surface), summarizing what was skipped.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Railway-grade install moment (#29)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:51:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1c7582f5bfe839e1f05a388e555905d74745bb27",
          "body": "Auto-link on first use, insta run (per-request secret injection),\nINSTA_PROJECT_ID linkless targeting, .env auto-gitignore.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.10 — the just-works release (#28)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:25:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "53831a7060094289ee85dfca8947f08763389c0c",
          "body": "…roring (#27)\n\nOne project → picked silently; several + TTY → one-keystroke picker;\nseveral + no TTY → actionable error (ids + INSTA_PROJECT_ID hint); zero →\npoints at project create. Choice persists to ./.insta/project.json so it\nhappens at most once per directory. Live-verified against insta-oss.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: auto-link — unlinked commands resolve the project instead of er…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:24:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "aa5ce0e11fc6a62af7fd3ef1e4a7e05eb3302bd6",
          "body": "…es .env (#26)\n\nThe Railway model: 'insta run -- <cmd>' fetches the branch bundle per\ninvocation and injects it into the child environment only — no .env on\ndisk, nothing committable, credentials live exactly as long as the\nprocess. And when 'insta secrets' does write an env file, it now\ngitignores what it wrote (git repos only, idempotent).\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: insta run — per-request secret injection; secrets auto-gitignor…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:18:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8bfc5426ef38e413f4cc69de9166deab93c78bc2",
          "body": "…G_ID (#25)\n\nRailway-parity env resolution: target any project from anywhere with no\n.insta/project.json (CI, one-off commands, agents); env beats a link file.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: linkless targeting — INSTA_PROJECT_ID / INSTA_BRANCH / INSTA_OR…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:12:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bc086ee7a2b43fc47dee0ecb3934a00b4bee90d0",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.9 — link-once walk-up resolution (#24)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:07:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0cd1e520de82b870aaa992da5f08c89ef47ed6e7",
          "body": "…n (#23)\n\nreadProject resolves the nearest ancestor link, so every command works\nfrom any subdirectory of a linked project; writeProject targets the found\nroot (branch switch in src/ no longer mints a nested link). Fresh links\nin unlinked trees still bind cwd.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: link once — git-style walk-up resolution for .insta/project.jso…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:06:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "674433d118e8efc3a87c80102ce8b5dbb3e4c85e",
          "body": "First fully-automated release: OIDC trusted publishing ships npm alongside\nthe binaries. Carries the agent one-liner, observe-hook fix, repo skill,\nand the auto-publish pipeline itself.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.8 (#22)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:00:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "160fcd575840bc587cccdbc24e0498cfcb78db3c",
          "body": "Swaps the NPM_TOKEN requirement for npm's Trusted Publisher flow: the\nworkflow identity (InsForge/insta-cli release.yml) is trusted directly\non npmjs.com. npm upgraded on the runner (OIDC exchange needs ≥11.5).\nSkill release section updated in the same PR per its keep-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: npm publish via OIDC trusted publishing (no token secret) (#21)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:57:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a8fb9c8b77a614ff01f445af4c002e3a0c50b6d4",
          "body": "publish-npm job in release.yml: gated on the binaries, tag pushes only,\ngranular NPM_TOKEN secret (bypasses interactive 2FA), --provenance\nattestation, and a clear error when the secret is missing. Skill updated\nin the same PR per its keep-this-skill-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: auto-publish npm on release tags (granular automation token) (#20)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:54:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "19b72b723faffe0f2b87f650b11c4515368f2bfb",
          "body": "Baseline-tested (agent without it guessed wrong on review flow, merge\ntype, bump-via-PR, and assumed npm publish might be in CI); with the\nskill a fresh agent answers both flows exactly. Includes the keep-this-\nskill-true rule: flow changes must update the skill in the same PR.\nGitignore: repo-owned skills tracked; installed skills stay ignored.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: repo skill — how agents develop and ship this CLI (#19)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:49:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5ac989de6fc76ce127b1ffeba7432d6f978c0b82",
          "body": "observe-hook fix (broken Claude Code config after every tool call), agent\none-liner (insta setup agent + agents.sh), INSTA_API_URL env precedence,\nEXPOSE-derived --port default, insta upgrade + autoupdate, test CI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.7 (#18)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:31:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3cde0e47f278d9f1ecd274d1f470f81e094896d3",
          "body": "…(#17)\n\nThe installer emitted command:'node' + an args array containing a\n${CLAUDE_PROJECT_DIR} template — Claude Code's hooks schema has no args\nfield and only shell-expands the command string, so node received the\ntemplate verbatim and threw MODULE_NOT_FOUND after EVERY tool call in\nevery linked p\n[…]\nker-based upsert), so 'insta observe install' heals\nexisting projects.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(observe): Claude Code hook must be a single shell-string command …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:29:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "94d9c989c65c5cb827b95be2e0aaaecebd43da00",
          "body": "…nts.sh shim (#16)\n\nThe Railway onboarding pattern (curl agents.railway.com | sh): agents.sh pipes\ninstall.sh --agents -y, which installs the checksum-verified binary then runs\nthe new 'insta setup agent' — user-GLOBAL install of the insta skill for every\ncoding agent (the skill is pure product know\n[…]\nris/better-auth) intentionally stay per-project as the\nstack manifest.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: agent one-liner — insta setup agent + install.sh --agents + age…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:28:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7332665b6391d898107cdb3e84c1db895684372f",
          "body": "…eploys (#11)\n\nDocs already call the port mismatch 'the #1 deploy mistake' — and it still\nhappened in live dogfooding (bare 'insta deploy .' with EXPOSE 3000 silently\nserviced 8080; every request refused). The Dockerfile states the truth, so\nread it: last EXPOSE wins, --port still overrides, prints what it picked.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(deploy): default --port from the Dockerfile's EXPOSE on source d…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T01:01:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5896746fbe51d22cf7357dedac816743e5fa46e6",
          "body": "Once any login wrote ~/.insta/config.json, the env var was silently\nignored (parsed.apiUrl always won). Found while driving the platform\ndev server with the stock CLI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): INSTA_API_URL env var overrides the persisted apiUrl (#10)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T00:55:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "97799bc7b0f8867d2e7e6a6fa7bf787131fcd2ce",
          "body": "The repo had only release.yml — PRs merged with cubic review alone and the\ntest suite never ran in CI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: run typecheck + the 33-test suite on every push/PR (#15)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T00:54:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2869f5ed9bbb7b6531534ae117ee562114b36510",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #14 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T01:00:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "131405de1989b364fbdf614873649e91a52fafb4",
          "body": "feat: insta billing uses /billing/overview (credits, forecast, breakdowns)",
          "is_bot": false,
          "headline": "Merge pull request #13 from InsForge/feat/billing-overview",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:57:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a9f660a3cbee9a28764bcade1dea2c8d4e2e5e4",
          "body": null,
          "is_bot": false,
          "headline": "bump version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:56:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31bccea289699ffb13ea9e04f8bf3faac7010952",
          "body": "…t, breakdowns)\n\nRepoint 'insta billing' from /orgs/:id/billing to /orgs/:id/billing/overview and\nrender the richer payload: totals + credits + forecast + per-dimension and\nper-project breakdown. Adds a pure billingLines() (unit-tested) that reuses\ncycleLine + a newly-extracted pure dimensionLines() from metrics.ts (insta usage\noutput unchanged). --json still dumps the raw overview.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(billing): insta billing uses /billing/overview (credits, forecas…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:51:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2e7762067df80ab0dc6e1879170df0a4601f2b7f",
          "body": "feat(deploy): add --websocket flag",
          "is_bot": false,
          "headline": "Merge pull request #12 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-08T04:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eaf9935161fb2a9c3e4dc0eccf17964f03f0d46e",
          "body": "Threads a --websocket boolean option through `insta deploy` into the\nplatform's POST /projects/:id/deploy request body, via a new pure\ndeployRequestBody() helper that's unit-tested. Only sent when set, so\nplain deploys are unchanged.",
          "is_bot": false,
          "headline": "feat(deploy): add --websocket flag",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-07T17:28:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddaf2e367557a52df89c6ec4b66460215b93cb9d",
          "body": "Suppress repeated skills-CLI banner on install (+ version bump)",
          "is_bot": false,
          "headline": "Merge pull request #9 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T20:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2addaf050eed78896547d3e8acc48306cbca5b5",
          "body": null,
          "is_bot": false,
          "headline": "update version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T19:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a4f64c48632eaf90e43592a54f5e5221b81fd57",
          "body": "`npx skills add` prints a full-screen ASCII banner at the top of every\ninvocation, so installing the 4 related skill repos stacked 4 banners.\nInject AI_AGENT into the child env so the skills CLI enters agent mode and\nskips the banner (it's already non-interactive; this only quiets output).\nPreserve a caller's existing AI_AGENT rather than clobbering it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ensure-skills): suppress repeated skills-CLI banner during install",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T18:01:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "68e27a0db4f49293c3b7feb9575202bcbf29ef92",
          "body": "feat: insta upgrade + autoupdate (on by default while pre-1.0)",
          "is_bot": false,
          "headline": "Merge pull request #8 from InsForge/self-update",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-04T13:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "294b1ae126f0c7f358c4a3390b412f2ac0940738",
          "body": "Self-update, channel-aware: native binary re-runs the release installer into\nits own install dir (INSTA_INSTALL_DIR); npm runs npm i -g insta@latest;\nsource checkouts get a git-pull hint. A detached background check caches the\nregistry's latest version (24h TTL, ~/.insta/update-check.json); on start\n[…]\ne: nudge on stderr for normal commands,\nhelp entries, autoupdate status.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P",
          "is_bot": false,
          "headline": "feat: insta upgrade + autoupdate (on by default while pre-1.0)",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-04T09:54:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47bffff3f81d5a1d3c2ca1b317b597877730549a",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #7 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T04:55:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a535e25fb55b8deb985c42396905b26c45827c0f",
          "body": null,
          "is_bot": false,
          "headline": "update version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T04:49:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acf01c84d633662861b7001897bb2e80fa1e4019",
          "body": "Add `insta secrets set <name> [value] [--branch]` and `secrets unset <name>\n[--branch]`, project-wide by default; value comes from the argument or stdin\n(keeps secrets out of shell history). Both are handleApproval-aware (202).\nExtend `policy set`'s help text with the secrets.write action.\n\nAlso fix\n[…]\ne parent group (secrets, billing) declares the\nsame flag name for its own default action — enable positional options so a\nflag written after the subcommand name binds to the subcommand, not the\ngroup.",
          "is_bot": false,
          "headline": "feat: insta secrets set/unset (user-managed secrets)",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T23:11:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3243be6609cd4c851aff18e982903bae86e9adcc",
          "body": "CLI: source-directory deploy · compute custom domains · auto-install skills",
          "is_bot": false,
          "headline": "Merge pull request #6 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5681a64cb4dfc7bcb9d9c9e0c5bdeb5497bd6ca8",
          "body": "- Translate README fully to English (public-facing package)\n- Bump version 0.0.2 -> 0.0.3\n- Switch license MIT -> Apache-2.0, add LICENSE file\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Prep for public release: English README, v0.0.3, Apache-2.0",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:28:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d94a56ced708cec6b89c3a1339fc75ffad80bac3",
          "body": "- name insta-cli → insta; drop private:true (was blocking publish)\n- files → dist/**/*.js so the ~440MB bun binaries in dist/bin are not shipped\n- add engines(node>=18), prepublishOnly build, repo/homepage/bugs/keywords,\n  publishConfig.access=public, license\n- --version now reads the installed package.json (npm/node) instead of\n  reporting 0.0.0; standalone binary still uses INSTA_CLI_VERSION\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Publish as the 'insta' npm package",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:17:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "afe8c1560c789ebdfa0d3422bbe2509211b2affe",
          "body": "Default `insta usage` to whole-org usage (org of the linked project) with a\nper-project cost breakdown; `--proj [id]` shows one project — the linked one,\nor a given project id. Both over the current billing cycle.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: show the org by default, --proj for a single project",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:10:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57a05a532f06f09b544fc1db8faecc71e1c21a47",
          "body": "The usage window now defaults to the current billing cycle; show it as\n'billing cycle <start> → <end-1d>' (to is the exclusive next-cycle start).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: label the window as the billing cycle (inclusive end date)",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:05:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c464fb4c9f3270a39083be811c6e2a40f934bbee",
          "body": "Render the customer-facing dimensions (cpu/memory/volume/egress/storage) the\nplatform now returns, with ram labelled 'memory'. Follows the platform\n/projects/:id/usage change to a { dimensions, totalCostUsd } response.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: show the 5 billing dimensions, not raw provider meters",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T17:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2305e97ba5b8ca87f59255832efc280503450fe9",
          "body": "`insta compute set-domain <host>` attaches a bring-your-own domain to a branch's\ncompute service and prints the DNS records to set in your own registrar;\n`check-domain` re-checks cert status, `remove-domain` detaches. Fly issues the\ncert + routes — the CLI just relays the platform's records/status.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add `insta compute set-domain` for developer custom domains",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T04:49:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c4aa6ecf17785d986ac9a0a83f7f69ac8f46df41",
          "body": "deploy now takes either a prebuilt --image (unchanged) or a source directory\n(positional <dir>). Source mode: mint a short-lived app-scoped Fly deploy token\nfrom the platform (POST /deploy-token), build+push <dir> with flyctl's remote\nbuilder (`flyctl deploy --build-only --push`, token via FLY_API_T\n[…]\nld/push helper + ensureFlyctl) + tests. The CLI never\nholds a standing Fly credential — the platform mints a scoped, expiring one.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Support source-directory deploy: `insta deploy <dir>`",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T04:15:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "993bbb49777dd1e26b01fb8b10ee6ec299f1e659",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #5 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75a028b53f39f4d4064d670ee3c35fa944b8c0ab",
          "body": "`insta project create` and `insta project link` now also install the related\nagent skills into the linked directory (in addition to the observe hook), so a\ncoding agent has provider context out of the box. Runs `npx skills add`\n(vercel-labs/skills) fully non-interactively — agents pinned (-a claude-\n[…]\ne command. Installed dirs (.claude/skills, .agents/skills,\n.github/skills) are gitignored — regenerable agent context, not source.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Auto-install related agent skills on project create/link",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32936582bce23782dfcda23f254cccc17766ab72",
          "body": null,
          "is_bot": false,
          "headline": "update default api url to staging",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:09:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "057a4be0b4b76fb00c1ef3b18ac535ba571ab695",
          "body": "insta services add/list/remove/scale/upgrade",
          "is_bot": false,
          "headline": "Merge pull request #4 from InsForge/feat/services-model",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-02T19:25:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a25228ae95a4acbce4bcf444d24d9d85079846a",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/devel' into feat/services-model",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-02T19:20:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 20,
      "commits_last_year": 114,
      "latest_release_at": "2026-07-21T01:53:33Z",
      "latest_release_tag": "v0.0.22",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 6,
      "mean_days_between_releases": 0.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "insta",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "insta",
            "insforge",
            "cli",
            "backend",
            "baas",
            "platform"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/insta",
          "is_deprecated": false,
          "latest_version": "0.0.22",
          "repository_url": "https://github.com/InsForge/insta-cli",
          "versions_count": 21,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 2912,
          "first_published_at": "2016-12-19T09:55:39.763000Z",
          "latest_published_at": "2026-07-21T01:53:59.839000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 16790,
      "source_files_sampled": 50,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 1248
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 1,
        "malicious_count": 0,
        "assessed_package": "npm:insta@0.0.22",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 64,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "jwfing",
          "commits": 71,
          "avatar_url": "https://avatars.githubusercontent.com/u/985038?v=4"
        },
        {
          "type": "User",
          "login": "tonychang04",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/26497075?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.623
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 4,
            "reason": "6 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f2dac1ce558652668ab38716ce6b37fb2a13e4b5",
        "ran_at": "2026-07-27T20:39:12Z",
        "aggregate_score": 4.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T11:01:25Z",
      "oldest_open_prs": [
        {
          "number": 65,
          "created_at": "2026-07-27T15:22:09Z",
          "last_comment_at": "2026-07-27T15:36:25Z",
          "last_comment_author": "tonychang04"
        }
      ],
      "last_merged_pr_at": "2026-07-25T11:00:58Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InsForge/insta-cli",
    "host": "github.com",
    "name": "insta-cli",
    "owner": "InsForge"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 54,
        "vitality": 70,
        "community": 32,
        "governance": 68,
        "engineering": 57
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 70,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 114,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "114 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 114
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 20,
              "latest_release_tag": "v0.0.22",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": 0.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "20 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "insta"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2912
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,912 downloads/month across npm",
                "points": 46.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2912,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 68,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.623
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 62% of commits",
                "points": 8.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 62
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "merged_prs": 64,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "64/64 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 64,
                      "decided": 64
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "followers": 184,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "InsForge",
              "public_repos": 29,
              "account_age_days": 533
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "184 followers of InsForge",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 184,
                      "login": "InsForge"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "29 public repos, account ~1 yr old",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 29
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "insta"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "21 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 57,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 54,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "6 existing vulnerabilities detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:insta@0.0.22 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:insta@0.0.22",
                  "assessed": 1
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 1,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 74,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.92,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 1248
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "92 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 92,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.62,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "62 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 62,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 16790,
              "source_files_sampled": 50,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/50 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 50,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T20:39:32.931899Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InsForge/insta-cli.svg",
  "full_name": "InsForge/insta-cli",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}