NextSpark-js/nextspark erreicht einen Gesundheitsindex von 58 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (85/100) ab, am schwächsten bei Community & Adoption (44/100). Zuletzt vor 5 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
58
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
58
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Release-Aktualität — letztes Release vor 114 Tagen
27/27
Release-Rhythmus — ein Release etwa alle 4,5 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
9
latest_release_tag
v0.1.0-beta.131
releases_from_tags
nein
days_since_latest_release
114
mean_days_between_releases
4,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Keine offenen Advisories — kein Advisory ist länger als 90 Tage öffentlich
Verwendete Eingangsdaten
source
osv
advisories
2
affected_packages
2
assessed_packages
18
unassessed_packages
0
affected_by_severity
moderate 2
direct_affected_packages
0
Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:@nextsparkjs/plugin-ai@0.1.0-beta.180 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 18 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 3 ⇿
0Sterne
3Forks
1Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 0Patch 0
OpenSSF Scorecard 3.7 / 10
3.7Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-24 15:23 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Abhängigkeits-Advisories 2
Die Installation von npm:@nextsparkjs/plugin-ai@0.1.0-beta.180 zieht 18 Pakete nach sich, direkt und transitiv: 2 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Paket
Version
Beziehung
Schweregrad
Advisories
Behoben in
@ai-sdk/provider-utils
2.2.8
indirekt
mittel
1
—
@ai-sdk/provider-utils
3.0.30
indirekt
mittel
1
—
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 25624,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 140872,
"HTML": 52056,
"Shell": 109914,
"Python": 409290,
"PLpgSQL": 117072,
"JavaScript": 1034132,
"TypeScript": 12742808
},
"pushed_at": "2026-07-19T03:16:32Z",
"created_at": "2026-01-03T18:41:25Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T03:16:36Z",
"description": "The complete Next.js SaaS boilerplate",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "NextSpark.js",
"type": "Organization",
"login": "NextSpark-js",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/252384127?v=4",
"created_at": "2025-12-31T21:37:24Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 204
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.0-beta.131",
"kind": "prerelease",
"published_at": "2026-03-31T21:29:33Z"
},
{
"tag": "v0.1.0-beta.119",
"kind": "prerelease",
"published_at": "2026-03-11T18:40:22Z"
},
{
"tag": "v0.1.0-beta.118",
"kind": "prerelease",
"published_at": "2026-03-11T13:30:07Z"
},
{
"tag": "v0.1.0-beta.117",
"kind": "prerelease",
"published_at": "2026-03-08T14:25:35Z"
},
{
"tag": "v0.1.0-beta.116",
"kind": "prerelease",
"published_at": "2026-03-06T03:47:56Z"
},
{
"tag": "v0.1.0-beta.111",
"kind": "prerelease",
"published_at": "2026-02-26T15:44:59Z"
},
{
"tag": "v0.1.0-beta.110",
"kind": "prerelease",
"published_at": "2026-02-26T15:19:54Z"
},
{
"tag": "v0.1.0-beta.106",
"kind": "prerelease",
"published_at": "2026-02-24T05:26:09Z"
},
{
"tag": "v0.1.0-beta.104",
"kind": "prerelease",
"published_at": "2026-02-24T00:18:34Z"
}
],
"recent_commits": [
{
"oid": "c2f317c57fa57758a5ef885065b93283df1335f4",
"body": "Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.180",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-19T03:15:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5d641da104190e78cd192ba1bf061eeede35dadd",
"body": "* fix(teams): make the active-team self-heal re-entrant instead of one-shot\n\nCloses the general defect behind nextspark#78: initialSyncDone latched\ntrue after the first sync and never re-armed, so any team-membership\nchange happening after that first sync left the client sending a\nstale, invalid act\n[…]\n entirely when userTeams was\nempty, leaving currentTeam and localStorage.activeTeamId pointing at a\nteam the user no longer belongs to if they were removed from every\nteam (not just their active one).",
"is_bot": false,
"headline": "fix(teams): re-entrant active-team self-heal (fixes #78) (#83)",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-18T23:48:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "749a1144c461b01de852c1c6afa50e0bdc0ad5b0",
"body": "…ady assume (#82)\n\nCommit 11f62e17 added `t.\"deletedAt\" IS NULL` predicates to\nTeamService.switchActive and GET /api/v1/teams to exclude soft-deleted\nteams from active-team resolution, but no migration ever added that\ncolumn to teams — 007_teams_table.sql's CREATE TABLE has no such\nfield, and none s\n[…]\nns alone.\n\nAdds the column (100% additive, NULL = active, matches prior\nbehavior for every existing row) plus a partial index for the\nnow-common `deletedAt IS NULL` lookup pattern both call sites use.",
"is_bot": false,
"headline": "fix(teams): add the deletedAt column that switchActive/GET-teams alre…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-18T23:47:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "636e3e92f62ae06beb9bc818defcf2277fbdae71",
"body": null,
"is_bot": false,
"headline": "Update .gitignore",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-17T23:35:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e6071dd818708b9a8b0e227f2728c103a7d066c",
"body": "Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.179",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-16T20:58:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4df2414e5ba8a1f6878d5a35e4cbf087c585e957",
"body": "This update refactors the discovery process for theme routes to ensure that both `docs.md` and `presets.ts` files can coexist in the same directory without conflicts. The logic now processes each route directory independently, allowing for accurate discovery and registration of both documentation and preset configurations. Additionally, error handling has been enhanced for reading and parsing these files, improving robustness in the discovery workflow.",
"is_bot": false,
"headline": "fix(discovery): improve handling of theme route docs and presets",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-16T20:55:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a06d34a9849865e3b335a1c84599f00e0341de",
"body": "Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.178",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-01T20:07:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9a4d948bbe257f95b7e7a85e9c5747c71f456cbe",
"body": "This update introduces an optional `x-act-as-user` request header, allowing developers to resolve session-scoped endpoints as different users during testing. The feature is gated for non-production environments and requires the developer role. Additionally, the API Explorer and related components ha\n[…]\nce for user selections and UI adjustments for the act-as-user input.\n\nAlso, the `.env.example` file has been updated to include a new configuration option for enabling this feature during development.",
"is_bot": false,
"headline": "feat(api-explorer): add act-as-user functionality for developer testing",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-07-01T20:06:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83dadb8d4d19bb690a93af868f9ecc1346622040",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.177",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-30T17:52:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d86a63bf8191f928ae42d87ce79a7d45ed6e1871",
"body": "This change modifies the team roles configuration throughout the application to utilize the new `teams.roles` structure instead of the deprecated `teamRoles`. Updates include adjustments in various components, services, and tests to ensure consistency with the new configuration model. The changes enhance clarity and maintainability of the team roles system.",
"is_bot": false,
"headline": "refactor: update team roles configuration to use `teams.roles` structure",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-30T17:49:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42fc4f62a3aa20cca861e63384ab0cd43d077f20",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(theme-default): register media-library feature",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-30T13:36:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d0df6fd64dccf503d1fac65b9a08f805753f345c",
"body": "The block-registry generator imports each component via { default as ... }, but the 16 default-theme block components only had named exports, so a fresh registry build broke the app (Export default doesn't exist). Add 'export default <Block>' to each.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(theme-default): add default export to block components",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-30T13:36:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "db9c4aa8eb4c1fbaeac7ec7017c3f39a9553d0d6",
"body": "…ce model)\n\nteamRoles (app.config) is the authoritative NON-OWNER role set: when present it REPLACES the defaults; when absent the set is base roles + permissions.config additionalRoles. owner is always force-included and never removable; DEFAULT_TEAM_ROLE never resolves to an absent role. The gener\n[…]\nry; team.actions validates via getInvitableRoles; config-sync/teams-types read the merged set. Adds a node:test build-layer suite.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): theme-declared team roles via app.config teamRoles (repla…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-30T13:36:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "82a64339cdb882d6130f90605129cb1696b172d5",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.1.0-beta.176",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-28T23:28:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c589a6f7e2f98ab2354189ed690a71494032222",
"body": "Steps 3-5 (mark verified, insert team_members, accept invitation) ran under the\njust-created user's RLS context via SET LOCAL app.user_id. Over a pooled\n(PgBouncer) connection that context does not reliably propagate to the\nteam_members INSERT, so the self-join WITH CHECK intermittently fails with\n4\n[…]\ne is no invitee session to drive RLS. Write as the service role (RLS\nbypass); rows carry explicit ids. Idempotent w.r.t. behavior.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(auth): signup-with-invite writes membership via the service pool",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-28T23:28:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "374f8fb3401d887a0642d1b3dad98a6e86531c24",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.1.0-beta.175",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-28T21:34:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0360c32d7de632871e969932a734f8eedc874eb1",
"body": "The invitation-token validation passed 'system' as the userId, assuming it\nbypassed RLS. It does not — a truthy userId routes the query to the RLS-gated\npool with a bogus app.user_id, so under enforced RLS the row is invisible and\nthe lookup returns null (a false \"invitation not found\"). The invitee has no\nsession yet and the unguessable token is the credential, so the lookup must use\nthe service pool. Pass `{ service: true }` instead.",
"is_bot": false,
"headline": "fix(auth): signup-with-invite token lookup must bypass RLS",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-28T21:34:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba70ef279dc30d517945ee212158c255a44a3653",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.174",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-25T14:33:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "111355e291dbabc4da6c5354e279930654b24427",
"body": "- Re-export Next.js route-level exports from the theme template in the blog page.\n- Update the theme route discovery logic to support colocated API routes and legacy paths, improving documentation retrieval for theme routes.\n- Add new entity pattern definitions in the blog's fixture data for better structure and clarity.",
"is_bot": false,
"headline": "feat(blog): enhance blog page exports and improve theme route discovery",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-25T14:32:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "016b4efb25a6a1c6f86db5bcfc57b416c2aa79ae",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.173",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-23T13:17:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "11f62e171bbc8fa2840be1ef2e8b6ad86ecc32a2",
"body": "Updated the SQL queries in the team service and API route to ensure that soft-deleted teams are excluded from user-specific team lists. This prevents stale references to deleted teams from appearing in active contexts, improving data integrity and user experience.",
"is_bot": false,
"headline": "fix(teams): enhance team retrieval logic to exclude soft-deleted teams",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-23T13:15:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ecb19bac6ac12481b23014c06f91e7a6070c00f",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.172",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-22T23:24:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "968790ede3be4c16e565cbe4a689259f6f4b0397",
"body": "- Introduced support for first-time OTP sign-ins, allowing them to carry a signup intent similar to header-based signups.\n- Updated the logic to differentiate between signup requests and OTP sign-ins, ensuring proper handling of user creation and intent mapping.\n- Enhanced the signup intent retrieva\n[…]\n experience during authentication.\n\nThis change streamlines the sign-in process for users utilizing OTP, ensuring that their intent is correctly processed without unnecessary registration-mode gating.",
"is_bot": false,
"headline": "fix(auth): enhance OTP sign-in handling and intent propagation",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-22T23:23:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "40d3ae0e0252f964f71bd5b72afb4744aece0d78",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.171",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-22T20:19:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d72e27a769003d311dddebcbc831011499562814",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.170",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-21T21:49:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "284a08c6c9956247ba884443287daef3d62bc3bb",
"body": "Resolve review findings on the account-deletion + CORS changes:\n\n- Extract UserService.anonymizeAccount() as the single source of truth\n (owner-team guard, meta scrub, trigger-safe row anonymization, session +\n credential revocation). The deleteAccount action and the delete-account\n route now bot\n[…]\ntracking on the attacker-controlled Origin), skip scheme-less\n wildcard entries, and send Vary: Origin on credentialed responses.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(account): consolidate account anonymization; harden CORS matcher",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-21T21:32:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1a9196093ef4885ce6637ba35aac620b9fe324fc",
"body": "A hard DELETE of the user row fails under foreign-key constraints (other\ntables reference the user) and would orphan that history. Anonymize the\nrow instead: blank the email to a unique deleted+<id>@deleted.invalid\nsentinel (freeing the UNIQUE email for re-registration), clear name/\nfirstName/lastNa\n[…]\nirrors the deleteAccount server action), returning 409 so the\ncaller can prompt to transfer ownership or delete those teams first.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(account): anonymize user on account deletion instead of hard-DELETE",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-21T20:49:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "67ae643a11c199aa641f5c02303cdaabc66dcb08",
"body": "… wildcard-pattern origins\n\n1) The per-key user-meta GET (/users/[id]/meta/[key]) returned 404 when a valid\nkey had no stored value, forcing every client that reads an optional key to\nswallow a network 4xx (which the browser still logs). Return 200 with\n{ key, value: null } instead — a missing optio\n[…]\nlabel and echo the\nconcrete request origin (credentialed responses can't use '*'); wire it into\naddCorsHeaders + wrapAuthHandlerWithCors. Rejects nested subdomains and\nlook-alike/suffix-spoof origins.",
"is_bot": false,
"headline": "fix(api): user-meta GET returns 200+null for unset key; CORS supports…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-21T19:06:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a759bb6ad6e313b94aab7042c2bacfada79e968a",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.169",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-21T18:22:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f43616876ca67e163281bb39c4567e4ea50d403e",
"body": "OAuth callbacks are browser GET redirects from the provider and cannot\ncarry the x-signup-intent header that header-based signup uses, so social\n(e.g. Google) first-time signups lost their intent and fell back to the\ndefault role. Read a short-lived signup-intent cookie (set by the client\nbefore the\n[…]\ntext so\nuser.create.after maps it to the initial team role (AUTH_CONFIG.signupIntent).\nSame trust model as the header: the value only maps to an app-configured\nrole via roleMap, so it cannot escalate.",
"is_bot": false,
"headline": "fix(auth): carry signup intent through OAuth via signup-intent cookie",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-21T16:51:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fcca4f11e3bd689b3b140f9ad4f4ef74336236d9",
"body": null,
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.168",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-19T20:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ada04b571b7980ec1b534f8e1953e39401d64604",
"body": "- Added support for an optional `x-signup-intent` header in the signup process, allowing the mapping of signup intents to initial team roles.\n- Updated the `POST` handler to process the signup intent within a request-scoped context.\n- Enhanced the `handleSignUp` function to accept an `intent` parame\n[…]\ned configuration types to include `signupIntent` settings for role mapping.\n\nThis feature enables more flexible user role assignments during the signup process, enhancing team management capabilities.",
"is_bot": false,
"headline": "feat(auth): implement signup intent handling for team role mapping",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-19T20:03:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7dce2a6f21790b56e36ad21543ddc6dd641f1cfd",
"body": "feat(core): RLS Enforcement Layer (beta.167)",
"is_bot": false,
"headline": "Merge pull request #77 from NextSpark-js/feat/rls-enforcement-layer",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-15T23:53:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf6e48c8a36202e2eacf95e882616b2138eee41a",
"body": "…ion generator\n\nDocumentation & agent skills for the beta.167 RLS enforcement layer, plus two\nfixes surfaced while documenting it.\n\nDocs (packages/core/docs):\n- 10-backend/03-rls-policies.md: REWRITE the \"Permissive Policies (Better Auth\n Tables)\" section that taught USING(true) on users/account/se\n[…]\nupdated_at()) — it previously emitted Supabase-style\n auth.uid()/UUID/snake_case that is invalid under the framework's RLS model.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(core): RLS enforcement layer docs + skills; fix CLI CVE & migrat…",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-06-12T23:02:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f016a8fea8059e7ca35398b03c5132c19747a2ea",
"body": "Make Row-Level Security real and enforceable once the app connects as a\nnon-owner role. Backward-compatible: installs that keep connecting as the\ntable owner are unchanged; the cutover to real RLS is opt-in via env.\n\nService context (db.ts/auth.ts):\n- Second connection pool (DATABASE_SERVICE_URL) th\n[…]\nnly tables, cross-tenant\nwrite denial, and entity-table grants via ALTER DEFAULT PRIVILEGES.\n\nBump all packages to 0.1.0-beta.167.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): RLS enforcement layer (beta.167)",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-06-12T19:49:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dd4e5e27c15b89d20121b51a7a58e57c63afe8aa",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.166",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T15:00:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "68eace23482f459f38e72271954d107a1d8932f4",
"body": "The monorepo pnpm-workspace.yaml only listed web/ and mobile/, so a plugin or\ntheme copied into web/contents/plugins|themes was not a workspace member and\nits own package.json dependencies were never installed (e.g. an AI plugin's\n@ai-sdk/* packages), causing `next build` to fail with 'Module not fo\n[…]\nt) so their dependencies install.\n\nValidated: @ai-sdk/anthropic now installs for a web-mobile project with the AI\nplugin selected.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): include web themes/plugins as workspace members in monorepo",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T15:00:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2339434781c0c7b4832aa0d88e4a63d8ae053b42",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.165",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T14:53:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8a4aa14bc51950d757a52711d31cbf15e7728d0a",
"body": "…onorepo\n\n- ai-workflow setup: pin `pnpm add @nextsparkjs/ai-workflow` to the CLI's exact\n version (was unversioned -> stale-cache pulled beta.159) and tolerate the\n pnpm ERR_PNPM_IGNORED_BUILDS non-zero exit (was reporting a false failure).\n- theme/plugin install: addTheme/addPlugin resolve ./con\n[…]\nence theme none):\nmobile@0.1.0-beta.165 pinned, plugin installs to web/contents/plugins/ai with\nno errors, mobile typecheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): pin ai-workflow install + fix theme/plugin install cwd in m…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T14:53:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c6e633396d8a04bceec2997101479d28b457eb92",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.164",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T14:31:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8a0601235320e43275526f6e865dc987850d1c42",
"body": "The wizard's installCore/installMobile ran `pnpm add @nextsparkjs/core` /\n`@nextsparkjs/mobile` UNVERSIONED, resolving the `latest` dist-tag. A stale\npnpm packument cache (or a lagging `latest` tag) could then pull an old version\n(e.g. mobile@0.1.0-beta.159 with no app/ template) even when core/cli \n[…]\nccio: create-nextspark-app@0.1.0-beta.164 installs\n@nextsparkjs/mobile@0.1.0-beta.164 and generates a complete web-mobile project.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): pin installCore/installMobile to exact CLI version",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T14:31:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c85a1dde5ade0618e26d6b3b2f14fb8d4ab398bd",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.163",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T14:03:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7af86c6b3bdcf4b2d54697827be6f12f33570e98",
"body": "…install\n\n- Version pinning: the wizard and create-nextspark-app now pin every\n @nextsparkjs/* dependency to the generating CLI's exact version instead of\n 'latest'. Avoids the incoherent 'version Frankenstein' install where 'latest'\n resolved to different versions across the web/ and mobile/ wor\n[…]\ntall: web `next build` green\n(94/94) and mobile `tsc --noEmit` clean (0 errors), with all @nextsparkjs/*\npinned to 0.1.0-beta.163.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli,mobile): coherent versions + clean mobile typecheck on fresh …",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-10T14:03:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aff5a21e6e24b375573b12e7e6e3c0d3515150d9",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.162",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-09T22:40:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "af0a1c55fa05c649ae7328cf5a98913caf678386",
"body": "The export-name extraction regexes used [a-zA-Z]+ which excluded digits, so a\ntheme or entity whose camelCased export contains a number (e.g. slug\n\"ns161v-app\" -> ns161vAppThemeConfig) was not detected. The registry generator\nthen fell back to an un-sanitized `${name}ThemeConfig` import with the raw\n[…]\nier class to [a-zA-Z_$][\\w$]* across theme, entity and\ncore-entity discovery so any valid JS identifier (incl. digits) is matched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core/registry): allow digits in theme/entity export-name discovery",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-09T22:40:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e348a990f39c948b6513054891d9862e067fe127",
"body": null,
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.161",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-09T22:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f681f218f79d73695bee6469253787d10626757",
"body": "Follow-up fixes found while validating beta.160 end-to-end:\n\n- install helpers (create-nextspark-app + wizard installCore/installMobile +\n monorepo install) now tolerate pnpm v10.1+/v11 exiting non-zero on\n unapproved native build scripts (ERR_PNPM_IGNORED_BUILDS); they verify the\n package actual\n[…]\nand failed with \"couldn't find next/package.json\".\n\nValidated: clean beta.160 web-mobile project builds green (next build, 94/94).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli,core): unblock web/mobile project creation on modern pnpm",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-09T22:09:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8a28a3c44b83d7694ad512ec77e3430ec03b2383",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.160",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-09T21:10:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4bb695a6691b8a16b594ae1a5821e2697e563be6",
"body": "- pack.sh: sync mobile templates (app/) before packing — fixes\n \"Mobile template is incomplete: missing app\" on web-mobile init\n- wizard: skip AI-workflow prompt under --yes so headless/CI init\n (and create-nextspark-app) completes instead of aborting after gen\n- generators: copy templates/lib int\n[…]\nrter theme: enable pages/posts entity permissions by default\n (these entities are always bundled, so owner/admin can manage them)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli,core): repair web/mobile project creation and production build",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-09T21:10:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "246d8ae13e6ff6b12d088a5eee5f7e60112713a3",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.159",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-04T14:36:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a735387c4feecad6a4856e638e5a8a1a2d3f4e6d",
"body": "…e-copies-of-blocks-nc\n\n[WEB-5717] Allow copy multiple blocks within pages",
"is_bot": false,
"headline": "Merge pull request #76 from noecaseres/feature/WEB-5717-allow-multipl…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-04T14:35:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5982690f6b71cbd932104b88194bd83b514d3878",
"body": "Replace the dual-key clipboard (single-block + multi-block) with one\nstorage key and one ClipboardData format holding a blocks array.\n\n- copyBlockToClipboard is now a thin wrapper over copyBlocksToClipboard\n- Single-block paste now goes through the same scope-compatibility filter\n- Fixes stale multi\n[…]\nU plurals in en/es multiSelect messages so single-block toasts\n read correctly (e.g. \"Block pasted\" instead of \"1 blocks pasted\")\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(core/block-editor): unify block clipboard into single format",
"author_name": "Noe Caseres",
"author_login": "noecaseres",
"committed_at": "2026-06-04T13:35:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "55dbf243bb9c568df8d6525dcd7b53210d98ea54",
"body": "…plicate/delete\n\nAllow selecting multiple blocks in the page builder (Cmd/Ctrl+click toggle,\nShift+click range) from both the tree view and the preview canvas.\n\n- Add BatchActionBar floating toolbar for batch copy/duplicate/delete/paste\n- Add multi-block clipboard V2 (localStorage) with backward-com\n[…]\ne, Escape\n- Show selection checkboxes in tree view and selection state in preview\n- Add en/es i18n strings for multiSelect actions\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core/block-editor): multi-select blocks with batch copy/paste/du…",
"author_name": "Noe Caseres",
"author_login": "noecaseres",
"committed_at": "2026-06-03T17:40:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "433b1ea421002b55b8d26e136e702cee60f2730e",
"body": "…emplate pages\n\nThe page generator only re-exported the default component from theme\ntemplates. Any route-level export defined in the template (generateMetadata,\ngenerateStaticParams, revalidate, dynamic, etc.) was silently dropped from\nthe generated app/(templates)/ route file, so Next.js never saw\n[…]\noute re-exports\ngenerateMetadata + generateStaticParams, build prerenders 49 landings,\ntitle/meta land in the static shell <head>.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(registry): re-export Next.js route-level exports from generated t…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-03T15:39:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7248f73b0796e61345d44848a372c30008068320",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.158",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-01T13:33:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e0a387f62005c4dbead4593989cfa98849abbe5",
"body": "better-auth wraps a raw pg Pool with its @better-auth/kysely-adapter. The 1.6.x\nadapter imports DEFAULT_MIGRATION_TABLE and DEFAULT_MIGRATION_LOCK_TABLE from\nkysely, but kysely 0.29.x removed those exports while the adapter still declares\n^0.29.0 as an allowed peer — so a fresh install resolves kyse\n[…]\napter's ^0.28.17 peer) lets the latest better-auth build cleanly. Supersedes the\nearlier better-auth<1.5.0 cap (no longer needed).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(deps): pin kysely to 0.28.17 (better-auth kysely-adapter needs it)",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-01T13:22:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "656313a6a7294dc9860fb8be9022327da391fc89",
"body": "better-auth >=1.5.0 ships a separate @better-auth/kysely-adapter package whose\nsqlite/bun/d1 dialects import DEFAULT_MIGRATION_TABLE and DEFAULT_MIGRATION_LOCK_TABLE\nfrom kysely — symbols no current kysely version exports — so webpack fails to compile\neven for Postgres apps that never use those dial\n[…]\n 1.4.x uses a bundled, tree-shakeable\nkysely adapter and builds cleanly. Cap the range until the upstream adapter import is fixed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(deps): cap better-auth to <1.5.0",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-01T03:28:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7618248612c7b7815ecb8b6e22f8750a8611b28e",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.157",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-01T00:34:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "197d54b8f5f51205c3a81f3fde36253b57a454b7",
"body": "…MAIN\n\nMulti-tenant apps that serve tenants on subdomains but run OAuth on the apex\nneed the apex-established session to be readable on the tenant subdomain.\nSocial providers don't allow wildcard redirect URIs, so OAuth can't run on the\nsubdomain itself. Enable crossSubDomainCookies with an explicit\n[…]\n subdomains.\n\nPairs with a wildcard entry in CORS_ADDITIONAL_ORIGINS so the subdomain\ncallbackURL passes the trusted-origin check.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(auth): opt-in cross-subdomain session cookies via COOKIE_BASE_DO…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-06-01T00:22:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aea18f7956dfda5f98e6c88aba024fac726a4870",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.156",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-31T22:56:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9598437dd634237e287ef7e71bbf27a8401b63ed",
"body": "UserService issued 4 SELECTs and 1 UPDATE against \"user\" (singular), but the\nframework maps Better Auth's user model to \"users\" (auth.ts modelName:\n\"users\") and the migration creates \"users\". The other 19 user-table refs in\ncore already use \"users\"; these five were the sole outliers and threw\nrelation \"user\" does not exist wherever they ran.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(users): query the users table by its real name (users, not user)",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-29T00:59:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9e278a5f21007bca3aa4d86921a5aca1e8c59a52",
"body": "The generic create handler always stamped the authenticated user's id into\nthe new row's userId. For shared (team-scoped) entities userId is not an\nownership marker — a row may be linked to a different user or to none at all.\nThe legacy `isSharedEntity && rawUserId` guard coerced an explicit null ba\n[…]\n creator (unchanged); userId === null -> null (new);\n non-empty string -> that id (unchanged); \"\" / falsy -> creator (unchanged).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(entities): allow explicit null userId on shared-entity create",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-29T00:59:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28344081d00792179222e350ba01600407f0a9f7",
"body": "Realigns ui, mobile, testing, cli, create-nextspark-app, ai-workflow,\nall themes and all plugins with @nextsparkjs/core, which was bumped\nin f4e80cb7 as part of the canInviteToRole refactor.",
"is_bot": false,
"headline": "chore: bump remaining 15 packages to 0.1.0-beta.155",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-27T12:09:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4e80cb72f1aca2a96c7f82769f6a193ab9b3e75",
"body": "The invite handler in templates/app/api/v1/teams/[teamId]/members/route.ts\nhardcoded a local ROLE_HIERARCHY map limited to the four built-in core\nroles. Consumers extending team roles via the merged permissions\nregistry hit ROLE_HIERARCHY_VIOLATION for legitimate same-or-lower\ninvites because lookup\n[…]\nned undefined.\n\nMove canInviteToRole into lib/teams/permissions.ts where it reads the\nsame merged hierarchy as canManageRole. Hierarchy uses >= so peers\ncan invite peers, matching the original intent.",
"is_bot": false,
"headline": "fix(teams): canInviteToRole reads merged hierarchy from registry",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-27T12:08:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1535fa487e3a7846751c1d7e32e12164dfdf25b",
"body": null,
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.154",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-27T00:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d87410cc11b10b416fbec8e3481279f5b00c988",
"body": "Updated the generic handler to ensure that relation-multi fields are consistently processed. Values may now arrive as either a JSON string or a raw JS array, and the code has been adjusted to normalize these inputs to a valid JSON string. This prevents issues with PostgreSQL array literals and ensures downstream consumers can reliably handle the data.",
"is_bot": false,
"headline": "fix(api): normalize relation-multi field handling in generic handler",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-27T00:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acbfc3199230ffd2d24cdc52a171a5139713c773",
"body": "fix(core): accept .d.ts as email slug markers in npm mode\n\nIn npm distributions the package ships compiled .js + .d.ts only,\nso the email registry discovery needs to accept .d.ts files as\nslug markers when running in npm mode. Monorepo mode keeps the\noriginal .ts-only contract.",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.153",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-26T20:10:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a6de1391c1480f5ce2552705a876eb638a49b0d",
"body": null,
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.152",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-26T19:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d71cd409f1c4743c7f3894a0b1c886afa4da4a48",
"body": "Added a validation function to check for HTML injection in 'name' and 'title' fields to prevent XSS attacks. Introduced a role-based ownership filter in the entity configuration, allowing scoped access to records based on user roles. This ensures that users only see records they are authorized to ac\n[…]\napply the ownership filter during list queries, returning empty results when no linked records are found. This change improves the overall security of the API by preventing unauthorized data exposure.",
"is_bot": false,
"headline": "feat(api): implement XSS protection and role-based ownership filtering",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-24T16:40:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18f536db7ae4c93ff1e68087dab7cd3bff120cdd",
"body": "Adds `user.changeEmail.enabled = true` to the core `betterAuth({...})`\nconfig so `POST /api/auth/change-email` is accepted. Without this the\nendpoint returns 400 \"Change email is disabled\" and themes that\nimplement post-success hooks (e.g. notify the previous email address\nwhen it changes) cannot ex\n[…]\npt-in flow\n(send verification link to NEW email, only commit on confirm) can\noverride via their own auth wrapper or app.config.ts.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(auth): enable user.changeEmail in Better Auth init",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-24T16:35:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "acd34f8cce94e49c3bf4e2599c2857c01f0fb329",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.151",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-20T19:49:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b3c715c8a1a3a8a9496ab24e1ee4482dc4127ae4",
"body": "…ramas-and-refresh-value-props-nc\n\n[WEB-5714] Fix input finder in Programs",
"is_bot": false,
"headline": "Merge pull request #74 from noecaseres/bugfix-WEB-5714-fix-combo-prog…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-20T19:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e868df4e42a2154c9d730d4fa9526d1a83cc726",
"body": "…oper search\n\nThe combobox was only matching on the option id, making it impossible to\nsearch by title or subtitle in relation selects like the programs combo.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core/ui): add keywords to SimpleRelationSelect CommandItem for pr…",
"author_name": "Noe Caseres",
"author_login": "noecaseres",
"committed_at": "2026-05-20T18:23:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ef9c148997bc6c908cb278510727ffa1f88faaa3",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.150",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-19T18:44:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bb357a27d58eadd05905ce4cbcf46c2a44514578",
"body": "…al userId parameter\n\nUpdated the SubscriptionService to include an optional userId parameter in the hasFeature and checkQuota methods. This allows for more granular control when checking features and quotas based on user-specific contexts. Adjusted related method calls to accommodate the new parameter.",
"is_bot": false,
"headline": "feat(core/subscription): enhance feature and quota checks with option…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-19T18:42:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3445d1cd8cadb658e13f9139cfbd57718a2dc39e",
"body": "Fix page builder issues",
"is_bot": false,
"headline": "Merge pull request #73 from noecaseres/bugfix/fix-page-builder-nc",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-19T18:41:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b24b6736aabc81dd489a3b362e1948282a06591",
"body": "…pport\n\nAdd clipboard-based copy/paste for blocks in the page builder (tree view\nand preview canvas), paste button in layout tab, and a duplicate action\nfor builder entities in the entity table/list.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core/block-editor): add block copy/paste and entity duplicate su…",
"author_name": "Noe Caseres",
"author_login": "noecaseres",
"committed_at": "2026-05-18T18:50:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b2395169122756354b20602e77e59cb8b06c1fce",
"body": "The settings button in the header toolbar was non-functional — settings\nmode is accessed through the sidebar tabs, not this button.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core/block-editor): remove orphan settings button from toolbar",
"author_name": "Noe Caseres",
"author_login": "noecaseres",
"committed_at": "2026-05-15T19:05:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bdb170d321055aa840e83d07af1347b52a17fc8e",
"body": "The settings mode div was missing full height, causing layout issues\nin the page builder config panel.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core/block-editor): add h-full to settings panel container",
"author_name": "Noe Caseres",
"author_login": "noecaseres",
"committed_at": "2026-05-15T18:57:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ef37bd1eb7443aa8133a27fa7c13aa692cd0813b",
"body": "Adds the missing unit tests so every executable file introduced or\nmodified by the email-registry refactor (PR #71) reaches 100% statements,\n100% branches, 100% functions, and 100% lines under jest --coverage.\n\nNew test files\n--------------\n\n- `tests/jest/lib/email/send.test.ts` — 11 tests verifying\n[…]\n/ Next.js\n request mocking. The email-side behaviour they invoke is fully\n covered through the registry/helper unit tests above.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(core/email): 100% coverage on email registry surface",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-05T17:54:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f5ae0ea499e82f11938e8f9aeb9409a7c628cbab",
"body": "Introduce a build-time email-registry following the same convention the\nproject already uses for blocks, templates, entities and i18n messages.\nThemes (and consumer projects, which ship as themes) can override or extend\ncore's transactional emails by dropping a file in `themes/<theme>/emails/`,\nwith\n[…]\ntemplates.ts` exports (one\n release cycle).\n- Implementing or removing the orphaned `WelcomeEmailData` type\n (separate cleanup).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core/email): theme-overridable email registry system",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-05T14:06:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7bc8030bc61c987b0a33bb0557846bd0f980f2e7",
"body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.149",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-05-05T12:41:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "26ff6c487fb472733a89854d2037e81602e904bb",
"body": "…starter app.config\n\nThe flag was added to AuthConfig in core (PR #69) with a default of `true`\nin core's app.config.ts. The runtime behaviour is correct, but the option\nis invisible to developers reading their theme's own app.config.ts.\n\nThis commit makes the option self-documenting in the two them\n[…]\nts entirely). Whether to\nadd a stub `auth:` block to those purely for documentation is a separate\ndecision and not addressed here.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(themes): document sendVerificationEmailOnSignup in default and …",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-04T15:10:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ca6ce0a416c079abc059405d65cc0d85a4a92724",
"body": "…r theme\n\nReplace the hardcoded `sendOnSignUp: false` introduced in beta.148 with a\nproper config flag exposed in `AuthConfig` so themes choose per-project.\n\nChanges:\n- types.ts: add optional `sendVerificationEmailOnSignup?: boolean` to\n `AuthConfig`\n- app.config.ts (core defaults): set `sendVerifi\n[…]\n`\nto their config. Synap (which reported the original bug) needs to add\nthis line in their theme's app.config.ts before upgrading.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core/auth): make sendOnSignUp verification email configurable pe…",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-04T15:04:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "baa098abf06abdf27e603ac734f8e5afb1fed4bc",
"body": "Patch release. Includes two fixes reported by external consumer (Synap):\n- fix(core/auth): suppress automatic verification email on signup\n- fix(core/billing): export getStripeInstance from stripe gateway\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.148",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-04T12:14:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f7a52778f16a53fad43f66483252f0d659df452a",
"body": "Rename the internal `getStripe()` helper in\n`packages/core/src/lib/billing/gateways/stripe.ts` to `getStripeInstance()`\nand add it to the module exports. All internal call sites updated to use\nthe new name. Lazy-singleton semantics, env-var guard, and Stripe API\nversion are preserved.\n\nThis unblocks\n[…]\nange, no breaking modifications.\n\nReported by Synap (per-seat licensed pricing flow, `team-seats.ts` and\nfive billing API routes).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core/billing): export getStripeInstance from stripe gateway",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-04T12:13:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ca490cf70dcf60ff70a67f794c2a0ba997c31cd0",
"body": "Add `sendOnSignUp: false` to the `emailVerification` config in\n`packages/core/src/lib/auth.ts`.\n\nBetter Auth was firing the verification email on every `/sign-up/email`\nrequest even when consumer projects verify email ownership through other\nmeans (OTP, invitation token). This produced a redundant\n\"\n[…]\n `emailOTP({ sendVerificationOnSignUp: false })`\nalready in core.\n\nReported by Synap (claim-account and signup-with-invite flows).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core/auth): suppress automatic verification email on signup",
"author_name": "Pablo Capello",
"author_login": "capellopablo",
"committed_at": "2026-05-04T12:13:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49966f3e681b3294ecf5430ea0591dc797bb2203",
"body": null,
"is_bot": false,
"headline": "chore: align remaining packages to 0.1.0-beta.147",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-19T23:49:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69d53c30d84cd4fc555640d55341cc83a2c176c0",
"body": "…-intl to ^4.9.1 (0.1.0-beta.147)\n\nDashboard pages crashed with \"No intl context found. Have you configured\nthe provider?\" when a project had a different next-intl version (e.g.\n4.8.x) than the one bundled with core (4.9.x). Each package version\ncreates its own IntlContext, so the provider from one \n[…]\nt:\n \"pnpm\": { \"overrides\": { \"next-intl\": \"^4.9.1\", \"use-intl\": \"^4.9.1\" } }\n- Run pnpm install + pnpm nextspark sync:app --force\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core): pass explicit locale to NextIntlClientProvider + bump next…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-19T23:45:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6460976a7161541c8ede98bb23a2d6b5e9c37035",
"body": null,
"is_bot": false,
"headline": "chore: untrack gitignored template/app files (align with .gitignore)",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-19T22:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97abb2a295cdfab71fb9665050818b3b5daa63db",
"body": null,
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.146",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-19T21:54:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab51bb4eab37d597e7f97d6a13804e55c7b4a4ef",
"body": "… teams PATCH permission fix\n\nTicket #10: Navigation items with requiresPermission are now hidden\nwhen the user lacks the required permission. Uses NavItemWithPermission\nand MoreSheetItemWithPermission wrapper components (hook-compliant).\nBackward compatible — items without requiresPermission remain\n[…]\n used 'teams.update' (not in\npermission registry, silently bypassed). Fixed to 'team.edit' which\nenforces owner/admin-only access.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core): sidebar and MobileMoreSheet filter by requiresPermission +…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-19T01:49:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7d6e0eaf419e338919b85873bdf1786607859889",
"body": null,
"is_bot": false,
"headline": "Update MobileBottomNav.tsx",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-17T12:52:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aab7f7d4f572d69918279bd3b40a1096d7881adc",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/NextSpark-js/nextspark",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T18:55:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9afacf881608c577699b9e3a4614045b90a28a45",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/NextSpark-js/nextspark",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T18:55:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20a4c9c437c0d6315b6ad4b24c8a4722ddfa726b",
"body": "…rd link, back button, checkbox container, show email buttons\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mobile/MW-A01): touch targets 44px on login form -- forgot passwo…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T18:34:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1580f291373e139d101fbd2a06b2db24de6e49e4",
"body": "- Fix superadmin docs page.tsx\n- Fix layout.ppr.tsx\n- Fix registry.mjs build script\n- Bump all 16 packages from 0.1.0-beta.144 to 0.1.0-beta.145\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump all packages to 0.1.0-beta.145",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T18:22:14Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6ee4fe91ae9eacd7cae9c3cdff0bd34838c36427",
"body": "…slations -- found via GAN mobile audit v2\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mobile/MW-A05): replace English \"Login\" with Spanish in auth tran…",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T15:19:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cb57b743946d09b969302d394aadeff03d835f81",
"body": null,
"is_bot": false,
"headline": "Update page.tsx",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T15:11:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3362b12f908294399119e128d26bbb06d933e982",
"body": null,
"is_bot": false,
"headline": "Update layout.ppr.tsx",
"author_name": "Federico Gonzalez",
"author_login": "fedevgonzalez",
"committed_at": "2026-04-15T14:36:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 9,
"commits_last_year": 471,
"latest_release_at": "2026-03-31T21:29:33Z",
"latest_release_tag": "v0.1.0-beta.131",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 26,
"days_since_latest_release": 114,
"mean_days_between_releases": 4.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@nextsparkjs/plugin-ai",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/plugin-ai",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": null,
"versions_count": 140,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 1981,
"first_published_at": "2026-01-06T01:17:37.734000Z",
"latest_published_at": "2026-07-19T03:19:25.851000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/theme-crm",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/theme-crm",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": null,
"versions_count": 142,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 1894,
"first_published_at": "2026-01-06T01:17:15.675000Z",
"latest_published_at": "2026-07-19T03:19:20.042000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/ui",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/ui",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": null,
"versions_count": 103,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 3382,
"first_published_at": "2026-01-27T18:36:33.925000Z",
"latest_published_at": "2026-07-19T03:18:57.874000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/theme-blog",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/theme-blog",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": null,
"versions_count": 142,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 2011,
"first_published_at": "2026-01-06T01:17:10.686000Z",
"latest_published_at": "2026-07-19T03:19:16.320000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/cli",
"exists": true,
"license": "MIT",
"keywords": [
"nextspark",
"cli",
"nextjs",
"saas",
"boilerplate"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/cli",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": "https://github.com/NextSpark-js/nextspark",
"versions_count": 168,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 2686,
"first_published_at": "2026-01-03T18:54:35.204000Z",
"latest_published_at": "2026-07-19T03:19:03.963000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/core",
"exists": true,
"license": "MIT",
"keywords": [
"nextjs",
"saas",
"boilerplate",
"starter",
"framework",
"authentication",
"stripe",
"payments",
"teams",
"typescript",
"react",
"tailwindcss"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/core",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": "https://github.com/NextSpark-js/nextspark",
"versions_count": 174,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 8338,
"first_published_at": "2026-01-03T18:54:22.101000Z",
"latest_published_at": "2026-07-19T03:18:55.640000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/plugin-walkme",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/plugin-walkme",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": null,
"versions_count": 76,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 1849,
"first_published_at": "2026-02-23T23:59:27.150000Z",
"latest_published_at": "2026-07-19T03:19:36.559000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@nextsparkjs/theme-default",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@nextsparkjs/theme-default",
"is_deprecated": false,
"latest_version": "0.1.0-beta.180",
"repository_url": null,
"versions_count": 150,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 1717,
"first_published_at": "2026-01-06T01:17:04.117000Z",
"latest_published_at": "2026-07-19T03:19:13.521000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 3,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 7
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"apps/dev/tsconfig.json",
"apps/mobile/tsconfig.json",
"packages/cli/tsconfig.json",
"packages/core/templates/contents/themes/starter/tests/tsconfig.json",
"packages/core/templates/tsconfig.json",
"packages/core/tsconfig.json",
"packages/create-nextspark-app/create-nextspark/tsconfig.json",
"packages/create-nextspark-app/tsconfig.json",
"packages/mobile/templates/tsconfig.json",
"packages/mobile/tsconfig.json",
"packages/testing/tsconfig.json",
"packages/ui/tsconfig.json",
"plugins/ai/tsconfig.json",
"plugins/amplitude/tsconfig.json",
"plugins/social-media-publisher/tsconfig.json",
"plugins/walkme/tests/tsconfig.json",
"plugins/walkme/tsconfig.json",
"themes/blog/tests/tsconfig.json",
"themes/crm/tests/tsconfig.json",
"themes/default/tests/tsconfig.json",
"themes/productivity/tests/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 88859,
"source_files_sampled": 2376,
"oversized_source_files": 3,
"agent_instruction_files": [
".claude/skills/react-best-practices/AGENTS.md"
],
"agent_instruction_max_bytes": 65538
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@ai-sdk/provider-utils",
"direct": false,
"version": "2.2.8",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 4.3,
"advisory_ids": [
"GHSA-866g-f22w-33x8"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 67
},
{
"name": "@ai-sdk/provider-utils",
"direct": false,
"version": "3.0.30",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 4.3,
"advisory_ids": [
"GHSA-866g-f22w-33x8"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 67
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 2
},
"advisory_count": 2,
"affected_count": 2,
"assessed_count": 18,
"malicious_count": 0,
"assessed_package": "npm:@nextsparkjs/plugin-ai@0.1.0-beta.180",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@tailwindcss/container-queries",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.1"
},
{
"name": "next",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^16.2.2"
},
{
"name": "pg",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.16.3"
},
{
"name": "react",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.4"
},
{
"name": "react-dom",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.4"
},
{
"name": "@nextsparkjs/core",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/ui",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/testing",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/theme-default",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/theme-blog",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/theme-crm",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/theme-productivity",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/plugin-ai",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/plugin-langchain",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/plugin-amplitude",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/plugin-social-media-publisher",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@hookform/resolvers",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
},
{
"name": "@tanstack/react-query",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^5.85.0"
},
{
"name": "@vercel/blob",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
},
{
"name": "better-auth",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.5"
},
{
"name": "date-fns",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "gray-matter",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.3"
},
{
"name": "lucide-react",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^0.539.0"
},
{
"name": "next",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "15.5.10"
},
{
"name": "next-intl",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^4.3.4"
},
{
"name": "react",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "19.1.0"
},
{
"name": "react-dom",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "19.1.0"
},
{
"name": "react-hook-form",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^7.62.0"
},
{
"name": "sonner",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.7"
},
{
"name": "stripe",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^18.5.0"
},
{
"name": "zod",
"manifest": "apps/dev/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.5"
},
{
"name": "@tanstack/react-query",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^5.62.0"
},
{
"name": "class-variance-authority",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "expo",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^54.0.0"
},
{
"name": "expo-constants",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~18.0.13"
},
{
"name": "expo-linking",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~8.0.11"
},
{
"name": "expo-router",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~6.0.22"
},
{
"name": "expo-secure-store",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~15.0.8"
},
{
"name": "expo-status-bar",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~3.0.9"
},
{
"name": "lucide-react-native",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^0.563.0"
},
{
"name": "nativewind",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^4.2.1"
},
{
"name": "react",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "19.1.0"
},
{
"name": "react-dom",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "19.1.0"
},
{
"name": "react-native",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "0.81.5"
},
{
"name": "react-native-css-interop",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^0.2.1"
},
{
"name": "react-native-gesture-handler",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~2.28.0"
},
{
"name": "react-native-reanimated",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~4.1.1"
},
{
"name": "react-native-safe-area-context",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~5.6.0"
},
{
"name": "react-native-screens",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "~4.16.0"
},
{
"name": "react-native-svg",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "15.12.1"
},
{
"name": "react-native-web",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^0.21.0"
},
{
"name": "react-native-worklets",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^0.5.1"
},
{
"name": "tailwind-merge",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^3.4.0"
},
{
"name": "tailwindcss",
"manifest": "apps/mobile/package.json",
"ecosystem": "npm",
"version_constraint": "^3"
},
{
"name": "@inquirer/prompts",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^7.2.0"
},
{
"name": "@nextsparkjs/core",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.0-beta.75"
},
{
"name": "chalk",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.0"
},
{
"name": "commander",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^12.0.0"
},
{
"name": "dotenv",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^17.2.2"
},
{
"name": "fs-extra",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^11.2.0"
},
{
"name": "ora",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^8.0.0"
},
{
"name": "tar",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.0"
},
{
"name": "@babel/runtime",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.0"
},
{
"name": "@codemirror/lang-json",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.2"
},
{
"name": "@dnd-kit/core",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^6.3.1"
},
{
"name": "@dnd-kit/sortable",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^10.0.0"
},
{
"name": "@dnd-kit/utilities",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.2.2"
},
{
"name": "@hookform/resolvers",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
},
{
"name": "@inquirer/prompts",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^7.2.0"
},
{
"name": "@nextsparkjs/testing",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@nextsparkjs/ui",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.0-beta.2"
},
{
"name": "@polar-sh/sdk",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.43.1"
},
{
"name": "@radix-ui/react-accordion",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.12"
},
{
"name": "@radix-ui/react-alert-dialog",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-avatar",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.10"
},
{
"name": "@radix-ui/react-checkbox",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.3"
},
{
"name": "@radix-ui/react-collapsible",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.12"
},
{
"name": "@radix-ui/react-context-menu",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.2.16"
},
{
"name": "@radix-ui/react-dialog",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-dropdown-menu",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.16"
},
{
"name": "@radix-ui/react-icons",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.2"
},
{
"name": "@radix-ui/react-label",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.7"
},
{
"name": "@radix-ui/react-menubar",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.16"
},
{
"name": "@radix-ui/react-popover",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-progress",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.7"
},
{
"name": "@radix-ui/react-radio-group",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.8"
},
{
"name": "@radix-ui/react-scroll-area",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.10"
},
{
"name": "@radix-ui/react-select",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.2.6"
},
{
"name": "@radix-ui/react-separator",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.7"
},
{
"name": "@radix-ui/react-slider",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.6"
},
{
"name": "@radix-ui/react-slot",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.3"
},
{
"name": "@radix-ui/react-switch",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.6"
},
{
"name": "@radix-ui/react-tabs",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.13"
},
{
"name": "@radix-ui/react-toggle",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.10"
},
{
"name": "@radix-ui/react-tooltip",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.8"
},
{
"name": "@shikijs/rehype",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.20.0"
},
{
"name": "@tailwindcss/container-queries",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.1"
},
{
"name": "@tanstack/react-query",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^5.85.0"
},
{
"name": "@tanstack/react-query-devtools",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^5.85.0"
},
{
"name": "@uiw/codemirror-theme-github",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.25.4"
},
{
"name": "@uiw/react-codemirror",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.25.4"
},
{
"name": "@upstash/ratelimit",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.3"
},
{
"name": "@upstash/redis",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.20.6"
},
{
"name": "@vercel/blob",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
},
{
"name": "better-auth",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.5"
},
{
"name": "chalk",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^5.4.1"
},
{
"name": "jiti",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.7.0"
},
{
"name": "kysely",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "0.28.17"
},
{
"name": "class-variance-authority",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "cmdk",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "date-fns",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "dotenv",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^17.2.2"
},
{
"name": "fs-extra",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^11.2.0"
},
{
"name": "gray-matter",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.3"
},
{
"name": "lucide-react",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.539.0"
},
{
"name": "mermaid",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^11.0.0"
},
{
"name": "next-intl",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.9.1"
},
{
"name": "next-themes",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.4.6"
},
{
"name": "ora",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^8.1.1"
},
{
"name": "pg",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^8.16.3"
},
{
"name": "react-day-picker",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^9.9.0"
},
{
"name": "react-hook-form",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^7.62.0"
},
{
"name": "react-json-view-lite",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.5.0"
},
{
"name": "react-markdown",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^10.1.0"
},
{
"name": "rehype-stringify",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^10.0.1"
},
{
"name": "remark",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^15.0.1"
},
{
"name": "remark-gfm",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "remark-rehype",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^11.1.2"
},
{
"name": "resend",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.0"
},
{
"name": "sharp",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.33.5"
},
{
"name": "shiki",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.20.0"
},
{
"name": "sonner",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.7"
},
{
"name": "stripe",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^18.5.0"
},
{
"name": "tailwind-merge",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.1"
},
{
"name": "uuid",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^13.0.0"
},
{
"name": "zod",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.5"
},
{
"name": "commander",
"manifest": "packages/create-nextspark-app/package.json",
"ecosystem": "npm",
"version_constraint": "^12.0.0"
},
{
"name": "chalk",
"manifest": "packages/create-nextspark-app/package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.0"
},
{
"name": "ora",
"manifest": "packages/create-nextspark-app/package.json",
"ecosystem": "npm",
"version_constraint": "^8.0.0"
},
{
"name": "fs-extra",
"manifest": "packages/create-nextspark-app/package.json",
"ecosystem": "npm",
"version_constraint": "^11.0.0"
},
{
"name": "prompts",
"manifest": "packages/create-nextspark-app/package.json",
"ecosystem": "npm",
"version_constraint": "^2.4.0"
},
{
"name": "@radix-ui/react-accordion",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.11"
},
{
"name": "@radix-ui/react-avatar",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.10"
},
{
"name": "@radix-ui/react-checkbox",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.3"
},
{
"name": "@radix-ui/react-icons",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.2"
},
{
"name": "@radix-ui/react-label",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.7"
},
{
"name": "@radix-ui/react-progress",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.7"
},
{
"name": "@radix-ui/react-separator",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.7"
},
{
"name": "@radix-ui/react-slider",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.5"
},
{
"name": "@radix-ui/react-slot",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.3"
},
{
"name": "@radix-ui/react-switch",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.6"
},
{
"name": "@radix-ui/react-tabs",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.12"
},
{
"name": "class-variance-authority",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "tailwind-merge",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.0"
},
{
"name": "@ai-sdk/anthropic",
"manifest": "plugins/ai/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.17"
},
{
"name": "@ai-sdk/openai",
"manifest": "plugins/ai/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.32"
},
{
"name": "@ai-sdk/openai-compatible",
"manifest": "plugins/ai/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.18"
},
{
"name": "ai",
"manifest": "plugins/ai/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.46"
},
{
"name": "ollama-ai-provider",
"manifest": "plugins/ai/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.0"
},
{
"name": "@anthropic-ai/sdk",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.71.0"
},
{
"name": "@langchain/anthropic",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.0"
},
{
"name": "@langchain/community",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.0"
},
{
"name": "@langchain/core",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.0"
},
{
"name": "@langchain/langgraph",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.2.0"
},
{
"name": "@langchain/ollama",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.0"
},
{
"name": "@langchain/openai",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.0"
},
{
"name": "handlebars",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^4.7.8"
},
{
"name": "langchain",
"manifest": "plugins/langchain/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 4,
"merged_prs": 72,
"open_issues": 3,
"closed_ratio": 0.4,
"closed_issues": 2,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "fedevgonzalez",
"commits": 281,
"avatar_url": "https://avatars.githubusercontent.com/u/60235004?v=4"
},
{
"type": "User",
"login": "capellopablo",
"commits": 180,
"avatar_url": "https://avatars.githubusercontent.com/u/7504518?v=4"
},
{
"type": "User",
"login": "noecaseres",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/86539333?v=4"
},
{
"type": "User",
"login": "florR504",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/104533679?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.599
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"claude.yml"
],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "180 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c2f317c57fa57758a5ef885065b93283df1335f4",
"ran_at": "2026-07-24T15:23:33Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T03:16:33Z",
"oldest_open_prs": [
{
"number": 57,
"created_at": "2026-02-19T13:50:26Z",
"last_comment_at": "2026-02-19T13:53:43Z",
"last_comment_author": "claude"
},
{
"number": 58,
"created_at": "2026-02-28T23:14:19Z",
"last_comment_at": "2026-03-01T02:29:07Z",
"last_comment_author": "claude"
},
{
"number": 61,
"created_at": "2026-03-20T15:21:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 62,
"created_at": "2026-03-20T17:57:38Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T23:48:37Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 75,
"created_at": "2026-05-26T20:50:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 79,
"created_at": "2026-07-17T23:28:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 80,
"created_at": "2026-07-17T23:40:10Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/NextSpark-js/nextspark",
"host": "github.com",
"name": "nextspark",
"owner": "NextSpark-js"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 48,
"vitality": 85,
"community": 44,
"governance": 50,
"engineering": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 85,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 471,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "471 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 471
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 90,
"inputs": {
"releases_count": 9,
"latest_release_tag": "v0.1.0-beta.131",
"releases_from_tags": false,
"days_since_latest_release": 114,
"mean_days_between_releases": 4.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "9 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 9
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 114 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 114
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 5,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 5 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 5
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 44,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 2,
"inputs": {
"forks": 3,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 73,
"inputs": {
"packages": [
"@nextsparkjs/plugin-ai",
"@nextsparkjs/theme-crm",
"@nextsparkjs/ui",
"@nextsparkjs/theme-blog",
"@nextsparkjs/cli",
"@nextsparkjs/core",
"@nextsparkjs/plugin-walkme",
"@nextsparkjs/theme-default"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 23858
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "23,858 downloads/month across npm",
"points": 58.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 23858,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 50,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.599
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 60% of commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 60
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"merged_prs": 72,
"open_issues": 3,
"closed_issues": 2,
"issue_closed_ratio": 0.4,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "40% of issues closed",
"points": 18.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 40
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "72/73 decided PRs merged",
"points": 37.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 72,
"decided": 73
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "NextSpark-js",
"public_repos": 3,
"account_age_days": 204
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of NextSpark-js",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "NextSpark-js"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~0 yr old",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@nextsparkjs/plugin-ai",
"@nextsparkjs/theme-crm",
"@nextsparkjs/ui",
"@nextsparkjs/theme-blog",
"@nextsparkjs/cli",
"@nextsparkjs/core",
"@nextsparkjs/plugin-walkme",
"@nextsparkjs/theme-default"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "174 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 174
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "180 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:@nextsparkjs/plugin-ai@0.1.0-beta.180 runtime dependency closure — what installing the published package pulls in — 18 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@nextsparkjs/plugin-ai@0.1.0-beta.180",
"assessed": 18
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 90,
"inputs": {
"source": "osv",
"advisories": 2,
"affected_packages": 2,
"assessed_packages": 18,
"unassessed_packages": 0,
"affected_by_severity": "moderate 2",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "2 affected: @ai-sdk/provider-utils 2.2.8 (moderate 4.3), @ai-sdk/provider-utils 3.0.30 (moderate 4.3)",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 2,
"packages": "@ai-sdk/provider-utils 2.2.8 (moderate 4.3), @ai-sdk/provider-utils 3.0.30 (moderate 4.3)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 18,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 75,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.94,
"agent_instruction_files": [
".claude/skills/react-best-practices/AGENTS.md"
],
"agent_instruction_max_bytes": 65538
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".claude/skills/react-best-practices/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".claude/skills/react-best-practices/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 94,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"apps/dev/tsconfig.json",
"apps/mobile/tsconfig.json",
"packages/cli/tsconfig.json",
"packages/core/templates/contents/themes/starter/tests/tsconfig.json",
"packages/core/templates/tsconfig.json",
"packages/core/tsconfig.json",
"packages/create-nextspark-app/create-nextspark/tsconfig.json",
"packages/create-nextspark-app/tsconfig.json",
"packages/mobile/templates/tsconfig.json",
"packages/mobile/tsconfig.json",
"packages/testing/tsconfig.json",
"packages/ui/tsconfig.json",
"plugins/ai/tsconfig.json",
"plugins/amplitude/tsconfig.json",
"plugins/social-media-publisher/tsconfig.json",
"plugins/walkme/tests/tsconfig.json",
"plugins/walkme/tsconfig.json",
"themes/blog/tests/tsconfig.json",
"themes/crm/tests/tsconfig.json",
"themes/default/tests/tsconfig.json",
"themes/productivity/tests/tsconfig.json"
],
"agent_commit_share": 0.63,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "apps/dev/tsconfig.json, apps/mobile/tsconfig.json, packages/cli/tsconfig.json, packages/core/templates/contents/themes/starter/tests/tsconfig.json, packages/core/templates/tsconfig.json, packages/core/tsconfig.json, packages/create-nextspark-app/create-nextspark/tsconfig.json, packages/create-nextspark-app/tsconfig.json, packages/mobile/templates/tsconfig.json, packages/mobile/tsconfig.json, packages/testing/tsconfig.json, packages/ui/tsconfig.json, plugins/ai/tsconfig.json, plugins/amplitude/tsconfig.json, plugins/social-media-publisher/tsconfig.json, plugins/walkme/tests/tsconfig.json, plugins/walkme/tsconfig.json, themes/blog/tests/tsconfig.json, themes/crm/tests/tsconfig.json, themes/default/tests/tsconfig.json, themes/productivity/tests/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "apps/dev/tsconfig.json, apps/mobile/tsconfig.json, packages/cli/tsconfig.json, packages/core/templates/contents/themes/starter/tests/tsconfig.json, packages/core/templates/tsconfig.json, packages/core/tsconfig.json, packages/create-nextspark-app/create-nextspark/tsconfig.json, packages/create-nextspark-app/tsconfig.json, packages/mobile/templates/tsconfig.json, packages/mobile/tsconfig.json, packages/testing/tsconfig.json, packages/ui/tsconfig.json, plugins/ai/tsconfig.json, plugins/amplitude/tsconfig.json, plugins/social-media-publisher/tsconfig.json, plugins/walkme/tests/tsconfig.json, plugins/walkme/tsconfig.json, themes/blog/tests/tsconfig.json, themes/crm/tests/tsconfig.json, themes/default/tests/tsconfig.json, themes/productivity/tests/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "63 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 63,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 88859,
"source_files_sampled": 2376,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/2376 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 2376,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"example",
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T15:23:46.642996Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/NextSpark-js/nextspark.svg",
"full_name": "NextSpark-js/nextspark",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit NextSpark-js/nextspark teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
