Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-24 07:11 UTC

NucleusFramework / Nucleus

Nucleus is the native desktop platform for the JVM. Combined with Compose Multiplatform, it forms the most complete, most performant, and most deeply integrated desktop application stack ever built — on any language, any runtime, any platform.

Kotlin · CMIT★ 308 Sterne⑂ 17 Forksseit Feb. 2026Auf GitHub ansehen ↗

NucleusFramework/Nucleus erreicht einen Gesundheitsindex von 59 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (85/100) ab, am schwächsten bei Security (40/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

59
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

59
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

NucleusFrameworkOrganisation
8 Follower6 öffentliche Reposseit Mai 2026

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

85Exzellent · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
16.6/36Commit-Rhythmus — 24/52 Wochen mit Commits
18/18Commit-Volumen — 2.023 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year2.023
human_commit_share1
days_since_last_push0
active_weeks_last_year24
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 100 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 0 Tagen
27/27Release-Rhythmus — ein Release etwa alle 1,1 Tage
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Verwendete Eingangsdaten
releases_count100
latest_release_tagv2.1.6
releases_from_tagsnein
days_since_latest_release0
mean_days_between_releases1,1

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

53Mittel · 18 % des Gesamtindex
Wie die Bewertung erfolgt
40.3/60Stars — 308 Stars
10/25Forks — 17 Forks
0/15Watcher — 1 Watcher
Verwendete Eingangsdaten
forks17
stars308
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (MIT)
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
6.3/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templateja

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

45Gefährdet · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
0.3/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 99 % der Commits
8.1/13.5Breite der Beitragenden — 6 Beitragende
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Verwendete Eingangsdaten
bus_factor1
contributors_sampled6
top_contributor_share0,988
Wie die Bewertung erfolgt
37.7/46.8Issue-Lösungsquote — 81 % der Issues geschlossen
35.3/38.3PR-Annahme — 271/294 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 0/9 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs271
open_issues18
closed_issues75
issue_closed_ratio0,806
closed_unmerged_prs23
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
6.9/25Reichweite des Inhabers — 8 Follower von NucleusFramework
6.6/25Kontohistorie — 6 öffentliche Repos, Kontoalter ca. 0 Jahre
Verwendete Eingangsdaten
followers8
owner_typeOrganization
is_verified
owner_loginNucleusFramework
public_repos6
account_age_days74

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

70Gut · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 8 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
6.4/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfigja
has_linter_confignein
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
15/15Dokumentations-/Homepage-Site — http://nucleusframework.dev/
10/10Repository-Beschreibung
10/10Topics — 12 Topics
0/10Wiki
Verwendete Eingangsdaten
topicscompose, compose-desktop, compose-multiplatform, desktop, desktop-app, framework, jvm, kotlin, linux, macos, native, windows
has_wikinein
homepagehttp://nucleusframework.dev/
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

40Gefährdet · 16 % des Gesamtindex

Sicherheitslage

40Gefährdet
Wie die Bewertung erfolgt
6/7.5Binary-Artifacts — binaries present in source code
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/9 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 26 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate4

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

70Gut · 0 % des Gesamtindex
Wie die Bewertung erfolgt
45/45Agentenanweisungen — AGENTS.md, CLAUDE.md, examples/benchmark-demo/AGENTS.md
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 100 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share1
agent_instruction_filesAGENTS.md, CLAUDE.md, examples/benchmark-demo/AGENTS.md
agent_instruction_max_bytes10.610
Wie die Bewertung erfolgt
12.6/18Bootstrap mit einem Befehl — aot-runtime/build.gradle.kts, autolaunch/build.gradle.kts, build.gradle.kts (Toolchain-Konvention, kein Task-Runner)
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — Kotlin (statisch typisiert)
10/10Reproduzierbare Umgebung — lockfile
4/10Belegte Agentenpraxis — 2 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesCargo.lock
has_dockerfilenein
typed_languageja
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configs
agent_commit_share0,02
toolchain_manifestsaot-runtime/build.gradle.kts, autolaunch/build.gradle.kts, build.gradle.kts, core-runtime/build.gradle.kts, darkmode-detector/build.gradle.kts, decorated-window-awt/build.gradle.kts, decorated-window-core/build.gradle.kts, decorated-window-jbr/build.gradle.kts, decorated-window-jewel/build.gradle.kts, decorated-window-jni/build.gradle.kts, decorated-window-material2/build.gradle.kts, decorated-window-material3/build.gradle.kts, decorated-window-tao/build.gradle.kts, decorated-window-tao/src/main/native/Cargo.toml, decorated-window-tao/src/main/native/vendor/accesskit_atspi_common/Cargo.toml, decorated-window-tao/src/main/native/vendor/accesskit_unix/Cargo.toml, decorated-window-tao/src/main/native/vendor/tao/Cargo.toml, energy-manager/build.gradle.kts, examples/benchmark-demo/build.gradle.kts, examples/benchmark-demo/ports/tauri/src-tauri/Cargo.toml, examples/cmp-demo/build.gradle.kts, examples/compose-demo/build.gradle.kts, examples/extra-launcher-demo/build.gradle.kts, examples/fs-watcher-smoke/build.gradle.kts, examples/jewel-demo/build.gradle.kts, examples/jni-demo/build.gradle.kts, examples/nucleus-demo/build.gradle.kts, examples/scheduler-demo/build.gradle.kts, examples/service-management-demo/build.gradle.kts, examples/shared/build.gradle.kts, examples/swing-tao-demo/build.gradle.kts, examples/system-info-demo/build.gradle.kts, examples/tao-demo/build.gradle.kts, examples/tao-native-test/build.gradle.kts, examples/zstd-demo/build.gradle.kts, freedesktop-icons/build.gradle.kts, fs-watcher/build.gradle.kts, fs-watcher/src/main/native/Cargo.toml, global-hotkey/build.gradle.kts, graalvm-runtime/build.gradle.kts, launcher-linux/build.gradle.kts, launcher-macos/build.gradle.kts, launcher-windows/build.gradle.kts, linux-hidpi/build.gradle.kts, media-control/build.gradle.kts, menu-macos/build.gradle.kts, native-http-ktor/build.gradle.kts, native-http-okhttp/build.gradle.kts, native-http/build.gradle.kts, native-ssl/build.gradle.kts, notification-common/build.gradle.kts, notification-linux/build.gradle.kts, notification-macos/build.gradle.kts, notification-windows/build.gradle.kts, nucleus-application/build.gradle.kts, plugin-build/build.gradle.kts, plugin-build/plugin/build.gradle.kts, scheduler-testing/build.gradle.kts, scheduler/build.gradle.kts, scripts/uia-listener/UiaListener.csproj, service-management-macos/build.gradle.kts, sf-symbols/build.gradle.kts, system-color/build.gradle.kts, system-info/build.gradle.kts, taskbar-progress-tao/build.gradle.kts, taskbar-progress/build.gradle.kts, updater-runtime/build.gradle.kts
dependency_bot_commit_share0
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — Kotlin (statisch typisiert)
54.4/55Handhabbare Dateigrößen — 12/1.163 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageKotlin
largest_source_bytes166.094
source_files_sampled1.163
oversized_source_files12
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — example, examples
Verwendete Eingangsdaten
example_dirsexample, examples
has_mcp_signalnein
api_schema_files

Eckdaten

308GitHub-Sterne
6Mitwirkende
2.023Commits, letzte 12 Monate
0Tage seit letztem Push
100Releases
1Bus-Faktor
18offene Issues
MavenPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 17 ⇿
0Sterne
17Forks
93Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

0481216201712026-022026-052026-07
Major 1Minor 0Patch 7
OpenSSF Scorecard 4.0 / 10
4.0Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-24 07:10 UTC

8Binary-Artifactsbinaries present in source code
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests8 out of 8 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/9 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities26 existing vulnerabilities detected
Direkte Abhängigkeiten 1
RegistryPaketVersionsvorgabeManifest
NuGetInterop.UIAutomationClient10.19041.0scripts/uia-listener/UiaListener.csproj
Alle Abhängigkeiten nicht erhoben

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [
        "compose",
        "compose-desktop",
        "compose-multiplatform",
        "desktop",
        "desktop-app",
        "framework",
        "jvm",
        "kotlin",
        "linux",
        "macos",
        "native",
        "windows"
      ],
      "is_fork": false,
      "size_kb": 30577,
      "has_wiki": false,
      "homepage": "http://nucleusframework.dev/",
      "languages": {
        "C": 1174555,
        "C#": 5300,
        "C++": 161930,
        "HTML": 5652,
        "Java": 27802,
        "Rust": 274551,
        "Shell": 97078,
        "Swift": 14473,
        "Kotlin": 4333277,
        "Python": 6566,
        "Batchfile": 74751,
        "PowerShell": 35660,
        "AppleScript": 808,
        "Objective-C": 569356
      },
      "pushed_at": "2026-07-23T19:09:36Z",
      "created_at": "2026-02-08T19:19:39Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T18:22:53Z",
      "description": "Nucleus is the native desktop platform for the JVM. Combined with Compose Multiplatform, it forms the most complete, most performant, and most deeply integrated desktop application stack ever built — on any language, any runtime, any platform.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Kotlin",
      "significant_languages": [
        "Kotlin",
        "C"
      ]
    },
    "owner": {
      "blog": "https://nucleusframework.dev/",
      "name": null,
      "type": "Organization",
      "login": "NucleusFramework",
      "company": null,
      "location": "Israel",
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/283423910?v=4",
      "created_at": "2026-05-10T15:29:51Z",
      "is_verified": null,
      "public_repos": 6,
      "account_age_days": 74
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.1.6",
          "kind": "patch",
          "published_at": "2026-07-23T18:59:15Z"
        },
        {
          "tag": "v2.1.5",
          "kind": "patch",
          "published_at": "2026-07-21T05:26:37Z"
        },
        {
          "tag": "v2.1.4",
          "kind": "patch",
          "published_at": "2026-07-19T20:20:28Z"
        },
        {
          "tag": "v2.1.3",
          "kind": "patch",
          "published_at": "2026-07-18T19:41:18Z"
        },
        {
          "tag": "v2.1.2",
          "kind": "patch",
          "published_at": "2026-07-17T16:11:15Z"
        },
        {
          "tag": "v2.1.1",
          "kind": "patch",
          "published_at": "2026-07-17T14:44:19Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2026-07-17T12:30:39Z"
        },
        {
          "tag": "v2.0.7",
          "kind": "patch",
          "published_at": "2026-07-14T15:20:00Z"
        },
        {
          "tag": "v2.0.6",
          "kind": "patch",
          "published_at": "2026-07-14T14:26:03Z"
        },
        {
          "tag": "v2.0.5",
          "kind": "patch",
          "published_at": "2026-07-14T07:03:56Z"
        },
        {
          "tag": "v2.0.4",
          "kind": "patch",
          "published_at": "2026-07-13T20:31:02Z"
        },
        {
          "tag": "v2.0.3",
          "kind": "patch",
          "published_at": "2026-07-13T16:47:35Z"
        },
        {
          "tag": "v2.0.2",
          "kind": "patch",
          "published_at": "2026-07-13T13:42:30Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2026-07-13T11:33:27Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2026-07-13T10:08:30Z"
        },
        {
          "tag": "v2.0.0-alpha-202607130836",
          "kind": "prerelease",
          "published_at": "2026-07-13T09:03:01Z"
        },
        {
          "tag": "v2.0.0-alpha-202607130649",
          "kind": "prerelease",
          "published_at": "2026-07-13T07:28:12Z"
        },
        {
          "tag": "v2.0.0-alpha-202607122115",
          "kind": "prerelease",
          "published_at": "2026-07-12T21:51:44Z"
        },
        {
          "tag": "v2.0.0-alpha-202607122054",
          "kind": "prerelease",
          "published_at": "2026-07-12T21:36:43Z"
        },
        {
          "tag": "v2.0.0-alpha-202607121452",
          "kind": "prerelease",
          "published_at": "2026-07-12T15:35:37Z"
        },
        {
          "tag": "v2.0.0-alpha-202607121302",
          "kind": "prerelease",
          "published_at": "2026-07-12T13:47:46Z"
        },
        {
          "tag": "v2.0.0-alpha-202607121139",
          "kind": "prerelease",
          "published_at": "2026-07-12T12:16:04Z"
        },
        {
          "tag": "v2.0.0-alpha-202607121049",
          "kind": "prerelease",
          "published_at": "2026-07-12T11:21:28Z"
        },
        {
          "tag": "v2.0.0-alpha-202607120908",
          "kind": "prerelease",
          "published_at": "2026-07-12T09:48:30Z"
        },
        {
          "tag": "v2.0.0-alpha-202607120757",
          "kind": "prerelease",
          "published_at": "2026-07-12T08:21:09Z"
        },
        {
          "tag": "v2.0.0-alpha-202607120617",
          "kind": "prerelease",
          "published_at": "2026-07-12T06:57:34Z"
        },
        {
          "tag": "v2.0.0-alpha-202607120312",
          "kind": "prerelease",
          "published_at": "2026-07-12T00:39:25Z"
        },
        {
          "tag": "v2.0.0-alpha-202607120006",
          "kind": "prerelease",
          "published_at": "2026-07-11T21:39:26Z"
        },
        {
          "tag": "v2.0.0-alpha-202607101450",
          "kind": "prerelease",
          "published_at": "2026-07-10T15:47:47Z"
        },
        {
          "tag": "v2.0.0-alpha-202607101432",
          "kind": "prerelease",
          "published_at": "2026-07-10T15:08:32Z"
        },
        {
          "tag": "v2.0.0-alpha-202607101252",
          "kind": "prerelease",
          "published_at": "2026-07-10T13:30:20Z"
        },
        {
          "tag": "v2.0.0-alpha-202607101141",
          "kind": "prerelease",
          "published_at": "2026-07-10T12:14:17Z"
        },
        {
          "tag": "v2.0.0-alpha-202607100953",
          "kind": "prerelease",
          "published_at": "2026-07-10T10:43:10Z"
        },
        {
          "tag": "v2.0.0-alpha-202607100944",
          "kind": "prerelease",
          "published_at": "2026-07-10T10:15:46Z"
        },
        {
          "tag": "v2.0.0-alpha-202607100509",
          "kind": "prerelease",
          "published_at": "2026-07-10T05:38:00Z"
        },
        {
          "tag": "v2.0.0-alpha-202607072216",
          "kind": "prerelease",
          "published_at": "2026-07-07T22:44:25Z"
        },
        {
          "tag": "v2.0.0-alpha-202607050350",
          "kind": "prerelease",
          "published_at": "2026-07-05T01:25:00Z"
        },
        {
          "tag": "v2.0.0-alpha-202607042242",
          "kind": "prerelease",
          "published_at": "2026-07-04T20:30:30Z"
        },
        {
          "tag": "v2.0.0-alpha-202607042238",
          "kind": "prerelease",
          "published_at": "2026-07-04T20:18:46Z"
        },
        {
          "tag": "v2.0.0-alpha-202607042201",
          "kind": "prerelease",
          "published_at": "2026-07-04T19:32:52Z"
        },
        {
          "tag": "v2.0.0-alpha-202607031556",
          "kind": "prerelease",
          "published_at": "2026-07-03T16:33:18Z"
        },
        {
          "tag": "v2.0.0-alpha-202607022249",
          "kind": "prerelease",
          "published_at": "2026-07-02T20:24:16Z"
        },
        {
          "tag": "v2.0.0-alpha-202607022133",
          "kind": "prerelease",
          "published_at": "2026-07-02T19:08:19Z"
        },
        {
          "tag": "v2.0.0-alpha-202607021927",
          "kind": "prerelease",
          "published_at": "2026-07-02T17:03:25Z"
        },
        {
          "tag": "v2.0.0-alpha-202607021635",
          "kind": "prerelease",
          "published_at": "2026-07-02T14:06:44Z"
        },
        {
          "tag": "v2.0.0-alpha-202607021343",
          "kind": "prerelease",
          "published_at": "2026-07-02T11:15:15Z"
        },
        {
          "tag": "v2.0.0-alpha-202606221352",
          "kind": "prerelease",
          "published_at": "2026-06-22T14:23:32Z"
        },
        {
          "tag": "v2.0.0-alpha-202606221012",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:45:58Z"
        },
        {
          "tag": "v2.0.0-alpha-202606211135",
          "kind": "prerelease",
          "published_at": "2026-06-21T11:56:17Z"
        },
        {
          "tag": "v2.0.0-alpha-202606211035",
          "kind": "prerelease",
          "published_at": "2026-06-21T11:08:42Z"
        },
        {
          "tag": "v2.0.0-alpha-202606201807",
          "kind": "prerelease",
          "published_at": "2026-06-20T18:41:48Z"
        },
        {
          "tag": "v2.0.0-alpha-202606161353",
          "kind": "prerelease",
          "published_at": "2026-06-16T14:30:31Z"
        },
        {
          "tag": "v2.0.0-alpha-202606141334",
          "kind": "prerelease",
          "published_at": "2026-06-14T14:03:48Z"
        },
        {
          "tag": "v2.0.0-alpha-202606141321",
          "kind": "prerelease",
          "published_at": "2026-06-14T13:47:07Z"
        },
        {
          "tag": "v2.0.0-alpha-202606141059",
          "kind": "prerelease",
          "published_at": "2026-06-14T11:23:33Z"
        },
        {
          "tag": "v2.0.0-alpha-202606140317",
          "kind": "prerelease",
          "published_at": "2026-06-14T03:49:17Z"
        },
        {
          "tag": "v2.0.0-alpha-202606120501",
          "kind": "prerelease",
          "published_at": "2026-06-12T05:33:26Z"
        },
        {
          "tag": "v2.0.0-alpha-202606120411",
          "kind": "prerelease",
          "published_at": "2026-06-12T04:36:59Z"
        },
        {
          "tag": "v2.0.0-alpha-202606111819",
          "kind": "prerelease",
          "published_at": "2026-06-11T18:54:36Z"
        },
        {
          "tag": "v2.0.0-alpha-202606111354",
          "kind": "prerelease",
          "published_at": "2026-06-11T14:31:21Z"
        },
        {
          "tag": "v2.0.0-alpha-202606080531",
          "kind": "prerelease",
          "published_at": "2026-06-08T06:07:22Z"
        },
        {
          "tag": "v2.0.0-alpha-202606080354",
          "kind": "prerelease",
          "published_at": "2026-06-08T04:22:34Z"
        },
        {
          "tag": "v2.0.0-alpha-202606072156",
          "kind": "prerelease",
          "published_at": "2026-06-07T22:26:16Z"
        },
        {
          "tag": "v2.0.0-alpha-202606072026",
          "kind": "prerelease",
          "published_at": "2026-06-07T20:51:47Z"
        },
        {
          "tag": "v2.0.0-alpha-202606071935",
          "kind": "prerelease",
          "published_at": "2026-06-07T20:04:05Z"
        },
        {
          "tag": "v2.0.0-alpha-202606070905",
          "kind": "prerelease",
          "published_at": "2026-06-07T06:38:43Z"
        },
        {
          "tag": "v2.0.0-alpha-202606070010",
          "kind": "prerelease",
          "published_at": "2026-06-07T00:37:17Z"
        },
        {
          "tag": "v2.0.0-alpha-202606062218",
          "kind": "prerelease",
          "published_at": "2026-06-06T22:46:02Z"
        },
        {
          "tag": "v2.0.0-alpha-202606062052",
          "kind": "prerelease",
          "published_at": "2026-06-06T21:19:28Z"
        },
        {
          "tag": "v2.0.0-alpha-202606061915",
          "kind": "prerelease",
          "published_at": "2026-06-06T19:50:28Z"
        },
        {
          "tag": "v2.0.0-alpha-202606061820",
          "kind": "prerelease",
          "published_at": "2026-06-06T18:38:43Z"
        },
        {
          "tag": "v2.0.0-alpha-202606051522",
          "kind": "prerelease",
          "published_at": "2026-06-05T12:42:45Z"
        },
        {
          "tag": "v2.0.0-alpha-202606041020",
          "kind": "prerelease",
          "published_at": "2026-06-04T10:50:07Z"
        },
        {
          "tag": "v2.0.0-alpha-202606040949",
          "kind": "prerelease",
          "published_at": "2026-06-04T10:18:51Z"
        },
        {
          "tag": "v2.0.0-alpha-202606040901",
          "kind": "prerelease",
          "published_at": "2026-06-04T09:31:39Z"
        },
        {
          "tag": "v2.0.0-alpha-202606040838",
          "kind": "prerelease",
          "published_at": "2026-06-04T09:07:16Z"
        },
        {
          "tag": "v2.0.0-alpha-202606040741",
          "kind": "prerelease",
          "published_at": "2026-06-04T08:08:56Z"
        },
        {
          "tag": "v2.0.0-alpha-202606032026",
          "kind": "prerelease",
          "published_at": "2026-06-03T20:57:21Z"
        },
        {
          "tag": "v2.0.0-alpha-202606031923",
          "kind": "prerelease",
          "published_at": "2026-06-03T19:52:05Z"
        },
        {
          "tag": "v2.0.0-alpha-202606031543",
          "kind": "prerelease",
          "published_at": "2026-06-03T16:13:10Z"
        },
        {
          "tag": "v2.0.0-alpha-202606022149",
          "kind": "prerelease",
          "published_at": "2026-06-02T22:22:16Z"
        },
        {
          "tag": "v2.0.0-alpha-202606022036",
          "kind": "prerelease",
          "published_at": "2026-06-02T21:06:00Z"
        },
        {
          "tag": "v2.0.0-alpha-202606021941",
          "kind": "prerelease",
          "published_at": "2026-06-02T20:10:12Z"
        },
        {
          "tag": "v2.0.0-alpha-202606021627",
          "kind": "prerelease",
          "published_at": "2026-06-02T16:55:28Z"
        },
        {
          "tag": "v2.0.0-alpha-202606021340",
          "kind": "prerelease",
          "published_at": "2026-06-02T14:06:05Z"
        },
        {
          "tag": "v2.0.0-alpha-202606021118",
          "kind": "prerelease",
          "published_at": "2026-06-02T11:49:10Z"
        },
        {
          "tag": "v2.0.0-alpha-202605312253",
          "kind": "prerelease",
          "published_at": "2026-05-31T23:14:48Z"
        },
        {
          "tag": "v2.0.0-alpha-202605312118",
          "kind": "prerelease",
          "published_at": "2026-05-31T21:43:06Z"
        },
        {
          "tag": "v2.0.0-alpha-202605312050",
          "kind": "prerelease",
          "published_at": "2026-05-31T21:10:00Z"
        },
        {
          "tag": "v2.0.0-alpha-202605311925",
          "kind": "prerelease",
          "published_at": "2026-05-31T19:51:02Z"
        },
        {
          "tag": "v2.0.0-alpha-202605311805",
          "kind": "prerelease",
          "published_at": "2026-05-31T18:27:32Z"
        },
        {
          "tag": "v2.0.0-alpha-202605311718",
          "kind": "prerelease",
          "published_at": "2026-05-31T17:47:49Z"
        },
        {
          "tag": "v2.0.0-alpha-202605311047",
          "kind": "prerelease",
          "published_at": "2026-05-31T11:17:33Z"
        },
        {
          "tag": "v2.0.0-alpha-202605310906",
          "kind": "prerelease",
          "published_at": "2026-05-31T09:31:53Z"
        },
        {
          "tag": "v2.0.0-alpha-202605310416",
          "kind": "prerelease",
          "published_at": "2026-05-31T04:49:07Z"
        },
        {
          "tag": "v2.0.0-alpha-202605291533",
          "kind": "prerelease",
          "published_at": "2026-05-29T16:02:06Z"
        },
        {
          "tag": "v2.0.0-alpha-202605291032",
          "kind": "prerelease",
          "published_at": "2026-05-29T10:56:21Z"
        },
        {
          "tag": "v2.0.0-alpha-202605290831",
          "kind": "prerelease",
          "published_at": "2026-05-29T08:57:59Z"
        },
        {
          "tag": "v2.0.0-alpha-202605290750",
          "kind": "prerelease",
          "published_at": "2026-05-29T08:20:12Z"
        },
        {
          "tag": "v2.0.0-alpha-202605290156",
          "kind": "prerelease",
          "published_at": "2026-05-29T02:24:23Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "1e9c35fc653f8b3e454e37b6354b9b1e5fef6c04",
          "body": "feat: upgrade Jewel to 0.39 and IntelliJ icons to 262",
          "is_bot": false,
          "headline": "Merge pull request #395 from NucleusFramework/feat/jewel-0.39-upgrade",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-23T18:22:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec35c9f97e5054d41ebd04e048e0acf8016a78ca",
          "body": "…orated-window-jewel\n\n- Relocate Jewel UnsafeAccessing/MacPlatformServicesDefaultImpl/foundation.util\n  build-time init and java.lang.Module#implAddOpens reflection to the\n  decorated-window-jewel module so they ship only with Jewel consumers\n- Keep only the generic slf4j build-time init in graalvm-runtime",
          "is_bot": false,
          "headline": "refactor(graalvm): move Jewel-specific native-image metadata into dec…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-23T18:18:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b19ee58cd88d6b2441e31b5a588e4f406b091ad5",
          "body": "- Bump jewel 0.37.0-262.4852.51 -> 0.39.0-262.9437.21 and icons 261 -> 262\n- Add intellij-icons-api/impl deps (Jewel 0.39 IntUiTheme needs IconManager/DefaultIconManager)\n- Add intellij-repository snapshots maven repo\n- GraalVM: initialize-at-build-time for Jewel UnsafeAccessing/MacPlatformServicesD\n[…]\nactor demo-project detection to path.startsWith(\":examples:\")\n- system-info-demo: enable AOT cache + aotTraining, drop AWT --add-opens, SerialGC\n- Register java.lang.Module#implAddOpens for reflection",
          "is_bot": false,
          "headline": "feat: upgrade Jewel to 0.39 and IntelliJ icons to 262",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-23T18:10:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f9a2e1a70941cb635a5761cd4e0730ca86c7f629",
          "body": "…-heap\n\nfeat(graalvm): desktop-appropriate default max heap for native images",
          "is_bot": false,
          "headline": "Merge pull request #390 from NucleusFramework/feat/graalvm-native-max…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T18:08:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8087c34b2a46dbd8b14fff2b2bb2debb84cfe41e",
          "body": "…ages\n\nNative modules call System.loadLibrary from the unnamed module; since\nJDK 24 (JEP 472) that emits a restricted-method warning at startup and\nwill be blocked in a future release. The JVM run path already passed the\nflag — bake it into the native-image build args too so the produced\nbinary starts clean and stays forward-compatible.",
          "is_bot": false,
          "headline": "feat(graalvm): bake --enable-native-access=ALL-UNNAMED into native im…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T18:06:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "726f7ff7cf4861a91b36bab9ba5328fd3cdfe1ef",
          "body": "… images\n\nnative-image's Serial GC defaults the max heap to 80% of physical RAM (25.6 GB on a\n32 GB machine), far above a desktop app's norm. HotSpot — which Compose Desktop apps\nalready run under on the JVM — defaults to ~25% (MaxRAMPercentage). Bake that parity\ndefault into native images via -R:Ma\n[…]\nsolute -R:MaxHeapSize and takes precedence.\n- Both are defaults only, overridable at runtime via -Xmx / -XX:MaximumHeapSizePercent.\n- Set maxHeapSizePercent = 80 to restore native-image's own default.",
          "is_bot": false,
          "headline": "feat(graalvm): bake a desktop-appropriate default max heap for native…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T18:01:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e12e92739bb021a0029933deb22a99eb8e66c81",
          "body": "…bfuscation\n\nfeat(graalvm): native-image advanced obfuscation + obfuscate-safe ProGuard rules",
          "is_bot": false,
          "headline": "Merge pull request #389 from NucleusFramework/feat/graalvm-advanced-o…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T17:59:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edb2b75a89051a2808d01a931e334cfdf088b053",
          "body": "…e globs\"\n\nRestore the blanket font/icon globs: they are required for resources bundled inside\nlibrary JARs (e.g. Jewel's SVG icons), which are NOT the app's own resources and so\nare not covered by the plugin's per-root autoIncludeResources. Dropping them broke\nJewel icons in the native image. The \"pattern too generic\" warning they trigger is\nadvisory only; correctness wins. Documented in CLAUDE.md to prevent re-removal.",
          "is_bot": false,
          "headline": "Revert \"fix(graalvm-runtime): drop blanket **/*.{svg,ttf,otf} resourc…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T17:51:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6025181fc58d12d687d2614573a990fbf6cad51e",
          "body": "They triggered native-image's \"pattern too generic (** without previous literal)\"\nwarning and matched nothing useful at the framework level: an app's own icons/fonts\nlive under its resource roots and are already registered per-root (literal-prefixed\nglobs like icons/**) by the plugin's autoIncludeRe\n[…]\nomposeResources/**. The blanket patterns were redundant and a bloat risk\n(would embed every .ttf/.svg from every dependency). Apps bundling resources at a\nnon-standard location can add their own glob.",
          "is_bot": false,
          "headline": "fix(graalvm-runtime): drop blanket **/*.{svg,ttf,otf} resource globs",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T17:49:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72541426ee7a4d5c65de5e86b9bcee7e6b55e2ff",
          "body": "…adata globs\n\nThe -H:IncludeResources option is deprecated and warns at build time (\"Use a\nresource-config.json ... instead\"). Move the four resource inclusion patterns from\nnative-image.properties into the module's reachability-metadata.json \"resources\"\nsection as glob patterns (regex .* -> glob **\n[…]\non. Semantics preserved: globstar matches at any level including\nthe root, so **/*.svg still matches root-level resources. SharedArenaSupport (no\nmetadata equivalent) stays in native-image.properties.",
          "is_bot": false,
          "headline": "fix(graalvm-runtime): migrate -H:IncludeResources to reachability-met…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T17:44:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c60fdfdf6ccf8526c9521bf11ef74005c09d979",
          "body": "…bfuscation\n\n- Add -H:+UnlockExperimentalVMOptions before -H:AdvancedObfuscation= so it keeps\n  working on future GraalVM releases (which will require explicit unlocking) and to\n  silence the experimental-option warning.\n- Pass --enable-sbom=export when advanced obfuscation is on: Oracle GraalVM emb\n[…]\nlt, baking the full dependency list into the binary and re-leaking\n  what obfuscation hides. Exporting keeps the SBOM as a build artifact without\n  embedding it. Overridable via buildArgs (last wins).",
          "is_bot": false,
          "headline": "fix(graalvm): unlock experimental option + export SBOM for advanced o…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T17:36:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab841132ac6850a4be5fc580028c699b8f6a548f",
          "body": "… ProGuard rules\n\n- graalvm { advancedObfuscation = true } passes -H:AdvancedObfuscation= (Oracle\n  GraalVM only, gated on the resolved toolchain and warns otherwise) so symbol\n  names baked into the native binary (stack traces, heap dumps, Class#getName,\n  strings) are obfuscated. Reflection/JNI na\n[…]\ned. Prevents ClassNotFoundException: androidx.compose.runtime.Composer.\n  Not injected when obfuscation is off, so shrinking is unaffected.\n- examples: enable the new toggles in cmp-demo/nucleus-demo.",
          "is_bot": false,
          "headline": "feat(graalvm): advanced obfuscation for native image + obfuscate-safe…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T17:30:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0b50ed977b205d84c9779130e3075f745f45d01",
          "body": "…aths\n\nUpdate stale sample-tao/ ignore entries to examples/tao-demo/ (module was\nrenamed) and add GraalVM native-image build-output patterns. PGO profiles\nunder graalvm/pgo/ remain trackable.",
          "is_bot": false,
          "headline": "chore: ignore GraalVM build output and fix tao-demo native artifact p…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T16:12:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed915de2ae8f83bda9498dd3245702bcd5f7af97",
          "body": "…eaks\n\nfix(tao): scope JNI local refs on permanently-attached upcall threads",
          "is_bot": false,
          "headline": "Merge pull request #387 from NucleusFramework/fix/tao-jni-local-ref-l…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T12:55:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09452c5daaa485963ee33619d5986327923f7b1e",
          "body": "Object-creating upcalls (find_class / new_string / new_long_array /\nnew_object_array) on threads attached via attach_current_thread_permanently\n— or nested-attached on the already-permanent Tao loop thread — never had\ntheir local frame popped, so each call leaked local refs for the life of the\nproce\n[…]\nwhose AttachGuard detaches per call; the new_long_array sites in\ndecoration/monitor/handles are JNI exports whose frame the JVM pops on return.\n\nVerified with cargo check on the macOS target (exit 0).",
          "is_bot": false,
          "headline": "fix(tao): scope JNI local refs on permanently-attached upcall threads",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T11:29:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "569de50a074b5230715c31c5e6a7903db2fdc85a",
          "body": "…dedup\n\nrefactor(tao): extract shared scene drag-and-drop into TaoSceneDnD",
          "is_bot": false,
          "headline": "Merge pull request #386 from NucleusFramework/refactor/tao-scene-dnd-…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T10:14:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0817ddcd78983ce20aabef81301f624aa96e582",
          "body": "The macOS/Windows/Linux Compose scene hosts each carried a byte-identical\ncopy of the inbound DnD callback (makeDragEvent/makeDropEvent + the\nonDragEnter/Over/Leave/Drop node handoff) and the outbound drag launcher —\n~130 lines per host, differing only in the native bridge object name and\nthe first \n[…]\nompile together on any OS (platform selection is at runtime), so the\nWindows/Linux delegations are compiler-validated locally too.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(tao): extract shared scene drag-and-drop into TaoSceneDnD",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T09:15:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4fbe7f1c95269b2fe191f3979e82c2e54dd3a651",
          "body": "…ion-discipline\n\nfix(tao): clear pending JNI exceptions after a11y/deep-link upcalls",
          "is_bot": false,
          "headline": "Merge pull request #385 from NucleusFramework/fix/tao-a11y-jni-except…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T08:55:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6605bfe394b50bd595433959eb5eaa6fde3521a2",
          "body": "The accessibility and deep-link native→JVM callbacks invoke\n`NativeTaoBridge.dispatch*` via `call_static_method` but never\n`exception_check`/`exception_clear` afterwards — unlike the\npointer/key/touch/DnD dispatch paths in events.rs/dnd.rs/touch.rs, which\nall do.\n\nIf a Kotlin `dispatchA11y*` / `disp\n[…]\n clean (cargo check); Windows/Linux a11y are\ncfg-gated and validated by rustfmt parse-check + copying the proven\npattern verbatim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tao): clear pending JNI exceptions after a11y/deep-link upcalls",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T08:13:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3c27f6bbf9fb031b6a6ae9d88f9013526b5843c",
          "body": "…n-minimize\n\nfeat(tao): pause the render loop while the window is minimized",
          "is_bot": false,
          "headline": "Merge pull request #384 from NucleusFramework/feat/tao-pause-render-o…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T08:06:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a6275df12e8190e307ff691c0c731e2a2d70026",
          "body": "Gate each platform scene host's frame body on window.isMinimized, placed\nbefore the frame-clock tick. Skipping sendFrame parks Compose animations\n(no withFrameNanos tick means no re-invalidation), so the FrameDispatcher\nquiesces instead of recording + presenting into a hidden surface.\n\n- macOS (rend\n[…]\nhrottle,\n  and additionally covers the app-synthesised Wayland minimize.\n- Restore re-kicks via requestRedraw on the MINIMIZED-off event, since the\n  parked loop no longer re-arms a redraw on its own.",
          "is_bot": false,
          "headline": "feat(tao): pause the render loop while the window is minimized",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T07:54:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6bbfea323b1899b0db47acb3ae351859819c80f",
          "body": "…surface\n\nfeat(tao): reintroduce Linux CSD drop shadow via a dedicated wl_shm subsurface (#374)",
          "is_bot": false,
          "headline": "Merge pull request #382 from NucleusFramework/feat/374-tao-shadow-sub…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:58:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3792da2774e64d9b3337b674f1e5a14e5c2f52d2",
          "body": "Flip NUCLEUS_TAO_LINUX_SHADOW to a kill switch (=0 disables) instead of opt-in\n(=1). The host still gates the shadow to Wayland non-popup windows (X11 stays\nflat) and it no-ops when the compositor lacks wl_shm / an RGBA visual, so the\ndefault-on is safe with an escape hatch.",
          "is_bot": false,
          "headline": "feat(tao): enable the Linux CSD drop shadow by default",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:33:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef8c09e8ab8abf6882555673929dc011c42692a8",
          "body": "Import TaoWindowShadowLinux instead of a fully-qualified reference, and collapse\nthe toTile() single-expression body onto its signature. ktlintCheck + detekt\nclean on decorated-window-tao.",
          "is_bot": false,
          "headline": "style(tao): ktlint fixes for the shadow controller wiring",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "077bf2569d476cbd254b20b711ec30102ecb43e7",
          "body": "Approach B rings the content with a negative-offset subsurface and never\ndeclares a WM margin or an input shape, so nativeShadowApply\n(gdk_window_set_shadow_width + window-state-event handler) and\nnativeShadowSetInputShape are dead. Remove both JNI entry points, their\nexclusive helpers (ShadowMargin\n[…]\n, shadow_apply_effective,\nshadow_on_window_state_event, the state-mask + event-struct), and the Kotlin\ndeclarations. C compiles clean under -Wall; only nativeShadowSupported/\nRender/ThemeStamp remain.",
          "is_bot": false,
          "headline": "refactor(tao): drop dead shadow WM-margin / input-shape bridge",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:28:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f507605f068e6617f375b7df21f86aa853834544",
          "body": "…ild tasks\n\nbuildNative<OS> writes the JNI libraries into src/main/resources/nucleus/native\n— a resource dir that GenerateProjectResourceMetadataTask reads — so Gradle 9\nflagged an implicit-dependency validation error (the source set doesn't declare\nsrc/main/resources as a build output, so the FileC\n[…]\n. Depend explicitly on each resource-contributing project's\nbuildNative* tasks; non-host variants self-skip so it's harmless.\n\nSurfaced once a native-source change makes buildNativeLinux actually run.",
          "is_bot": false,
          "headline": "fix(plugin): wire generateGraalvmProjectResourceMetadata to native bu…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:20:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ef80535be89cc54f4d72b6ac386bbc12da2804ed",
          "body": "Re-add the JNI reachability entry dropped by #374's removal. Without it,\nnative-image silently eliminates the shadow bridge and the theme render fails\nat runtime. NativeTaoEglBridge (which gained the shadow subsurface methods) is\nalready registered class-wide (jniAccessible), so its new methods are covered.",
          "is_bot": false,
          "headline": "build(tao): re-register NativeTaoLinuxShadowBridge for native-image",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:12:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f35e24cc5b67b2745da174cc875adb8d87b13708",
          "body": "shadow_ensure_buffer no longer tears down and recreates the memfd + mmap +\nwl_shm_pool on every size change (interactive resize churned one per frame).\nThe backing store is created once and grown in place (ftruncate + wl_shm_pool\n.resize + remap, grow-only); only the lightweight wl_buffer view is recreated\non a dimension change. Exact-size commits (focus fade, theme) reuse everything\nwith zero protocol traffic.",
          "is_bot": false,
          "headline": "perf(tao): reuse the shadow shm pool across resize frames",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:08:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83d78ee1be37e0d379a5c65bbc8a14751994d24a",
          "body": "The real cause of the backdrop-during-resize: onFocusChanged cleared\ncompositorDragActive on any focus-in, but GNOME toggles keyboard focus *during*\na compositor resize/move grab. That mid-grab focus-in cleared the mask, so the\nnext focus-out flipped the shadow to backdrop for the rest of the drag (\n[…]\ne mask on real pointer motion resuming (the compositor withholds motion\nfor the whole grab, so first motion = grab ended) instead of on focus-in, and\nre-sync the shadow to the actual focus state then.",
          "is_bot": false,
          "headline": "fix(tao): don't unmask shadow focus on mid-grab focus-in",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T04:02:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "30f217b49d02c9016e093fbf1bd5a4fe9ee09313",
          "body": "A compositor resize/move grab makes GTK report focus-out for the whole drag, so\nthe shadow cross-faded to backdrop mid-resize. The onFocusChanged masking (focus\n|| compositorDragActive) could still let an edge through on event ordering.\nRe-assert the focused state every frame while compositorDragActive is live in\ncommitShadow — idempotent once already focused.",
          "is_bot": false,
          "headline": "fix(tao): keep focused shadow during compositor resize/move grab",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T03:56:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d48ac26605a8aeb86afa6867950688c72bf7ac16",
          "body": "…ffset\n\nThe first cut offset the content subsurface into the shadow ring and grew the\nsurface via gdk_window_set_shadow_width. That moved the visible content while\ninput/resize stayed relative to GTK's parent surface origin — clicks landed\noffset and the resize edges were unreachable.\n\nPivot: leave \n[…]\nn\n  declaration / grow) — margins now only size the shadow buffer\n- host: pass -inset offsets to nativeShadowCommit, no content offset\n\nRebuilt linux-x64 natives into resources + cleared loader cache.",
          "is_bot": false,
          "headline": "fix(tao): shadow via negative-offset sibling subsurface, no content o…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-21T03:52:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf4b590af0393d205346491d94f9ca611f430048",
          "body": "… host\n\n- TaoComposeSceneHostLinux: initShadow() arms the controller on attach (Wayland,\n  non-popup), declares WM margins and offsets the content subsurface into the\n  ring; commitShadow() uploads the nine-slice tile to the shadow subsurface each\n  frame after the content swap and hides it while ma\n[…]\nindow-tao:compileKotlin) and both native .so link with the\nnew JNI symbols exported. Wayland runtime behaviour still unverified (can't\nexercise the Wayland path on this box — needs on-device testing).",
          "is_bot": false,
          "headline": "feat(tao): shadow subsurface phase 3 — wire controller into the Linux…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T20:25:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "057021b6ae409fb7a8ac7ff1c39f3bc3684aa9e0",
          "body": "… (Wayland)\n\nThe core of approach B. In nucleus_tao_egl.c:\n- bind wl_shm alongside wl_compositor/wl_subcompositor at attach; store the\n  parent wl_surface + wl_display on the attachment\n- lazily create a second wl_subsurface placed *below* the content one, backed\n  by an anonymous memfd wl_shm ARGB8\n[…]\nidge: declare the three new external methods.\n\nCompiles (gcc object + :decorated-window-tao:compileKotlin). Not yet wired into\nthe host; Wayland runtime behaviour unverified (needs on-device testing).",
          "is_bot": false,
          "headline": "feat(tao): shadow subsurface phase 2+3 — native SHM shadow subsurface…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T20:21:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a2fb796f6fe12e456e260c2e044ce3c29873ffe",
          "body": "…dations\n\nApproach B (Wayland-only) for reintroducing the CSD drop shadow removed in\n\\#374: a dedicated wl_subsurface backed by a wl_shm ARGB buffer, always\nalpha-blended by the compositor, instead of riding in the possibly-opaque EGL\ncontent buffer that broke #361.\n\nPhase 1 (no compositing yet):\n- \n[…]\nshadow as a small canonical nine-slice tile (blended by focus fraction) for\n  the native SHM compositor to expand — drops the old Skia nine-slice draw\n- design doc: docs/linux-csd-shadow-subsurface.md",
          "is_bot": false,
          "headline": "feat(tao): shadow subsurface phase 1 — theme render + controller foun…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T20:09:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "96bbc21402ae4917994755d4f067b03ec44b0898",
          "body": "…ow-v2\n\nfix(tao): remove Linux CSD drop shadow (#374)",
          "is_bot": false,
          "headline": "Merge pull request #381 from NucleusFramework/fix/374-remove-csd-shad…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:57:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5be63ca01e152fc5fa610cecd68a1e97034eef03",
          "body": "The GTK CSD drop shadow added in #361 rendered as an opaque black frame on\ndriver stacks that present the EGL child buffer as opaque (alpha not\nhonored): the shadow lived in that buffer and its BlendMode.CLEAR margin\ncarve showed pure black (NixOS/GNOME Wayland). The shadow also required the\ncontent\n[…]\nion carves rounded corners only;\n  currentResizeDirection drops shadow insets\n- DecoratedWindow: drop shadow padding + surface-grow bookkeeping\n- build.sh / reachability-metadata: drop the shadow bits",
          "is_bot": false,
          "headline": "fix(decorated-window-tao): remove Linux CSD drop shadow (#374)",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:54:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10142bdcea211b939b641847e529aefd9709abff",
          "body": "…ct-consumer-rules\n\nfeat(proguard): apply dependencies' META-INF/proguard consumer rules",
          "is_bot": false,
          "headline": "Merge pull request #380 from NucleusFramework/feat/proguard-auto-inje…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:35:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3dfc9abe8ad0c06be8054362f953a22b62af023",
          "body": "…ng fix suffices",
          "is_bot": false,
          "headline": "refactor(proguard): drop dependency consumer-rule harvesting; shadowi…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:34:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b6584b900605af476ca98369bc595b6d950b694",
          "body": "Root cause: the plugin classpath also carries the JetBrains Compose Gradle\nplugin, which bundles a resource with the identical name\ndefault-compose-desktop-rules.pro. getResourceAsStream returned the upstream\ncopy, so Nucleus's enriched rules (JNI keeps for every native module,\n-dontwarn dev.nucleus\n[…]\nmodules, so the per-module consumer\n.pro files added earlier are redundant and removed again; the dependency\nconsumer-rule harvesting in AbstractProguardTask stays (R8 parity for 3rd-party\nlibraries).",
          "is_bot": false,
          "headline": "fix(proguard): stop upstream Compose shadowing Nucleus's default rules",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:30:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d21f94d5188b1d4aa477259b7ccaa1a0c5daa8b",
          "body": "…etector\n\nProGuard's shrinker cannot see native call sites, so it stripped callback methods\ninvoked from native by name, crashing minified apps at runtime:\n- decorated-window-tao: NoSuchMethodError onEvent (nativeRunBlocking) — keep all\n  callback interfaces/impls (*Callback/*Listener/*Dispatcher) and native methods\n- darkmode-detector: onThemeChanged callback + native methods\n\nMirrors each module's native-image reachability metadata.",
          "is_bot": false,
          "headline": "fix(proguard): keep JNI callback/native surface of tao and darkmode-d…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:22:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6317b3e2bc6124e74831f854f213c50b3fb4c61e",
          "body": "…y refs\n\nNow that the plugin applies dependencies' META-INF/proguard rules, ship the\n-dontwarn rules Nucleus modules need for references that are legitimately absent\nfrom a minified release:\n\n- graalvm-runtime: org.graalvm.* / com.oracle.svm.* (native-image build-time API)\n- decorated-window-tao: or\n[…]\n/ .devtools.* (hot reload, dev only)\n- nucleus-application, decorated-window-material2/3: the jbr/jni backend classes\n  dev.nucleusframework.window.DecoratedWindowKt / DecoratedDialogKt, unused on Tao",
          "is_bot": false,
          "headline": "feat(proguard): ship consumer -dontwarn rules for optional/compileOnl…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:12:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4edd5f488099c2738a40f48702c438be709c965",
          "body": null,
          "is_bot": false,
          "headline": "feat(proguard): apply dependencies' META-INF/proguard consumer rules",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d172d17f3922708555bc6ef769f9cf52cd3d257",
          "body": "…fault backend\n\nThe flagship nucleus-demo and all recent demos depend on decorated-window-tao;\njni/jbr are legacy/maintenance-only. CLAUDE.md still listed jni as recommended\nand didn't list the tao module at all.",
          "is_bot": false,
          "headline": "docs: retire stale decorated-window-jni recommendation; tao is the de…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T19:05:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4196298ff242a332bcf6fb94141a47d9f3ebba48",
          "body": "…de-project-resources\n\nfeat(graalvm): auto-include the project's own resources in native image",
          "is_bot": false,
          "headline": "Merge pull request #379 from NucleusFramework/feat/graalvm-auto-inclu…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T18:58:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8178381005578c58e3628237b476a7f2819c79cc",
          "body": "…nferred",
          "is_bot": false,
          "headline": "fix(graalvm): wire resource source-dir collections so task deps are i…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T18:40:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb238645719b941278e4065b3f76c59fe537753b",
          "body": "native-image only embeds resources it is explicitly told about, and dynamic\ngetResourceAsStream(computedPath) calls cannot be resolved statically. Assets\nloaded by a computed path (e.g. markdown files listed in an index) were silently\ndropped from the binary, unlike the JVM distribution where every \n[…]\nM / Java) plus those of project(...) module\ndependencies. Third-party JAR resources stay excluded (covered by L1/L2 metadata\nand static analysis). Opt out via graalvm { autoIncludeResources = false }.",
          "is_bot": false,
          "headline": "feat(graalvm): auto-include the project's own resources in native image",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T18:32:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a51acd86f004385665361f5d6f51d9149d2e19e5",
          "body": "fix(tao): audit hardening — native fixes, test coverage, host refactor, logging",
          "is_bot": false,
          "headline": "Merge pull request #378 from NucleusFramework/fix/tao-audit-hardening",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T18:13:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f0c164f7557a35f8e22a69957e88a8ee4390530",
          "body": "Replace the scattered System.err.println / printStackTrace diagnostics with\nthe module's established java.util.logging pattern\n(Logger.getLogger(\"dev.nucleusframework.window.tao.<feature>\")):\n\n- TaoAccessibility: two env-gated a11y traces -> a11yLogger.fine {}\n- NativeViewOverlayControllerWindows: o\n[…]\nt as-is: surfacing an\nuncaught dispatched-task failure on stderr is a deliberate choice there.\n\ndetekt regenerated (no new actionable findings beyond the existing baseline);\ncheck + reformatAll green.",
          "is_bot": false,
          "headline": "refactor(tao): route residual stderr logging through java.util.logging",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T17:06:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb99ca6021a9cd795877fbb6ec175bff03c93fde",
          "body": "… ABI leak\n\nNo observable behaviour change; internal structure only.\n\n- AbstractTaoComposeSceneHost: hoist the a11y debounce scheduler (the one\n  subsystem that was byte-identical across the macOS/Linux/Windows hosts)\n  and the pointer-button mapping into a shared base the three hosts now\n  extend. \n[…]\nays green apart from the intentional TaoTransferableAccess removal\n(apiDump'd). Local: check + taoHeadfulTest green, tao-demo runs and the AT-SPI\nprojection is unchanged (36 nodes, same roles/labels).",
          "is_bot": false,
          "headline": "refactor(tao): share scene-host base, generic popup context, hide DnD…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T16:45:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bbc78a4d04bc7c4b9eafa9081fb560d71f42d030",
          "body": "… and battery drift\n\n- TaoA11yProjectionTest (stage-1, also registered in the battery):\n  Compose semantics -> TaoSemanticsObserver -> controller snapshot ->\n  v7 wire bytes, including role/action/testTag projection, update\n  propagation, topology invariants and a full wire-format walk. The\n  contro\n[…]\n is missing from TaoSceneTestBattery, when a registered case is\n  stale, or when a new test class is neither registered nor declared\n  JVM-only — eliminating silent drift in the GraalVM image battery.",
          "is_bot": false,
          "headline": "test(tao): cover the a11y projection, DnD conversion, popup lifecycle…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T16:20:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be7a9362fafa2f07f52a4ec229e8b5a20b2ab09d",
          "body": "- UIA (Windows a11y): take proj->lock in Element_Simple_GetPropertyValue\n  and Element_Value_get_Value. apply_snapshot frees label/valueStr/\n  customActions under that lock, and UIA proxies can call back from\n  outside the STA through transient marshalled references (see\n  byid_free_table), so the u\n[…]\nget_get_type through the shared loader\n  instead of a leaked per-call dlopen, and own the input-box callback\n  global ref via a GObject destroy-notify so GTK-side finalisation can\n  no longer leak it.",
          "is_bot": false,
          "headline": "fix(tao): harden native bridges against races and resource leaks",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-20T02:32:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f02ef003fbe8a3dfcb98576d3b6ad6892658e723",
          "body": "…n-button-colors\n\nfix(tao): apply TitleBarStyle color overrides to caption buttons",
          "is_bot": false,
          "headline": "Merge pull request #377 from NucleusFramework/fix/tao-titlebar-captio…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T19:51:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ba43cd3644e8cf87efd263965698e42431dfe39",
          "body": "…n buttons",
          "is_bot": false,
          "headline": "fix(tao): apply TitleBarStyle color overrides to Windows/Linux captio…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T19:45:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea0a4110c774a6134f338b90aada003a9a4e0b2f",
          "body": "ci: cache native builds, merge per-platform artifacts, cancel superseded runs",
          "is_bot": false,
          "headline": "Merge pull request #375 from NucleusFramework/ci/native-build-cache",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T19:26:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d955a5aea8a1d2bfda70a2699e90c1346bace86c",
          "body": "The native binaries are a pure function of the src/main/native sources, yet\nevery workflow invocation recompiled all of them from scratch: each PR push\ntriggered three parallel full rebuilds (pre-merge + test-graalvm +\ntest-packaging), and a release tag four more.\n\nbuild-natives.yaml now caches each\n[…]\nobs become a single 'pattern: natives-*' download.\n\npre-merge.yaml also gains a concurrency group cancelling superseded PR runs\n(pushes to main are never cancelled: their run saves the shared caches).",
          "is_bot": false,
          "headline": "ci: cache native build outputs and merge per-platform artifacts",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T19:11:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "813670ac2bf721b97f66b1d1c6c0931fffd56ade",
          "body": "test(decorated-window-tao): tiered test infra — offscreen scene harness + headful window suite",
          "is_bot": false,
          "headline": "Merge pull request #373 from NucleusFramework/test/tao-scene-harness",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T18:53:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42552f6e7cf616ef09d2639a7edb626d7f9a5bba",
          "body": "…layout\n\nrefactor(decorated-window-tao): JetBrains-like package layout",
          "is_bot": false,
          "headline": "Merge pull request #371 from NucleusFramework/refactor/tao-jetbrains-…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T18:49:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17758fcb4b1d22ff9382ccef6b5c8deb4877ab42",
          "body": "NativeTaoGlxBridge and the nucleus.tao.linux.renderer property are gone;\nEGL is the only Linux renderer (X11/XWayland via nativeAttachX11, native\nWayland via nativeAttachWayland). The old comment still advertised a\nglx|egl switch that no code reads.",
          "is_bot": false,
          "headline": "docs(tao-linux): drop the stale GLX-vs-EGL renderer selection comment",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T18:22:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "878521fa4123479d7e8bd8301f36fbb2c4a58698",
          "body": "…land\n\nxdg-shell has no client-side positioning, so setOuterPosition is a\ndocumented no-op on native Wayland and onMoved never fires. Mirror GDK's\nbackend selection (WAYLAND_DISPLAY unless GDK_BACKEND or the\nNUCLEUS_TAO_LINUX_RENDERER=x11 escape hatch forces X11 — the native loop\nsetenvs GDK_BACKEND too late for the JVM's env snapshot to see it).\n\nFirst use of the harness's skip hook; on a real GNOME Wayland session the\nsuite now reports 5 run / 1 skipped / 0 failed, and 6/6 on X11/XWayland.",
          "is_bot": false,
          "headline": "test(tao-scene-harness): skip the setOuterPosition case on native Way…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T18:22:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65e6512da06727e61cec905c1cdcad8f4c08952a",
          "body": "…aders announce it\n\nCompose does not focus any element inside a newly opened Dialog, so the\nsnapshot's focus id stayed on the window root and the only bus traffic on\nopen was a children-changed:add — Orca (and by the same mechanism NVDA /\nVoiceOver, which also key announcements off the platform focu\n[…]\nfted in appearance order). Verified with Orca:\nopening the demo dialog now speaks 'dialog VoiceOver users press VO+Esc\nto dismiss.'; a real focus inside the dialog takes over as soon as the\nuser tabs.",
          "is_bot": false,
          "headline": "fix(tao-a11y): move the AT focus to a fresh modal dialog so screen re…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T18:22:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b582e9e9650270d1fceb7924b09be5f5da61b60",
          "body": "…imestamp\n\nMutter's focus-stealing prevention drops _NET_ACTIVE_WINDOW requests\ncarrying GDK_CURRENT_TIME (0): gtk_window_present is a silent no-op and a\ndeiconified window stays Iconic with _NET_WM_STATE_DEMANDS_ATTENTION, so\nFocus does nothing and EVENT_MINIMIZED(false) never reaches the JVM on\nGN\n[…]\naught it).\n\nVendored tao patch 0005: fetch a fresh server timestamp via\ngdk_x11_get_server_time and use it for the Focus request and for the\nactivation that must accompany deiconify. No-op on Wayland.",
          "is_bot": false,
          "headline": "fix(tao-linux): stamp restore/focus activation with a real X server t…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T18:21:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "32f229a1b4dff42a1d84af756ae6927b5194aba2",
          "body": "…n dispatcher\n\nThe harness advances a fully synthetic clock, but QueueDispatcher did not\nimplement Delay — every delay/withTimeout inside scene code (notably\nCompose's MouseWheelScrollingLogic coalescing timeout) fell back to\nkotlinx's DefaultExecutor, i.e. real time on another thread. On a loaded\nr\n[…]\n\nbusy while a timer is due within a short horizon (covers the ~100 ms wheel\ncoalescing timeout, ignores 500 ms housekeeping like caret blink). The\nscroll pipeline is now deterministic across machines.",
          "is_bot": false,
          "headline": "test(tao-scene-harness): virtualize delay/withTimeout in the offscree…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T15:32:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b05152f60fb958b51448ddde51efd3755c484f6e",
          "body": "… not a GL issue\n\nThe Windows UIA protocol is validated end-to-end on real hardware\n(physical GPU, Windows 11): every verify-uia.ps1 assertion passes, no\nSKIPPED. The hosted-runner self-skips were never a display-adapter/WGL\nlimitation — the Windows host renders through ANGLE/D3D11 (WARP-capable\non \n[…]\nh WGL/opengl32, so installing Mesa's opengl32.dll\nnext to java.exe had no effect. The empty UIA tree was the idle-activation\nrace fixed in the a11y sync scheduler. Update the job comments accordingly.",
          "is_bot": false,
          "headline": "ci(tao-a11y): drop the Mesa/llvmpipe step — the Windows self-skip was…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T15:04:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a670ffa9040de2cc6f9764d21f4f276ec3aa72cd",
          "body": "…e set\n\nRangeValue.SetValue used to translate into a single Increment/Decrement\nstep (10% of the range), so SetValue(0.7) from 0.5 landed on 0.6 — UIA\nclients expect the slider to land ON the requested value. Add a set_value\ncallback channel (C export + Rust trampoline) that forwards the absolute\nva\n[…]\n1ySetValue upcall, which routes into\nCompose's SetProgress with range clamping — the same path the Linux AT-SPI\nbackend already uses. Falls back to the relative step if the callback is\nnot registered.",
          "is_bot": false,
          "headline": "fix(tao-windows-a11y): dispatch UIA RangeValue.SetValue as an absolut…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T15:04:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5cbbf1ebaab51c7bfaae220bb900579c5bbbf6e9",
          "body": "…hile idle\n\nAn assistive-tech client that connects while the scene is idle (e.g. a UIA\nprobe issuing WM_GETOBJECT against a settled window) sets the native\nactive/resync flags, but the debounced semantics walk had already fired and\nbeen gated off — nothing re-scheduled it, so the provider kept servi\n[…]\n the macOS, Windows, and Linux hosts.\n\nNUCLEUS_A11Y_DEBUG now also traces the first push carrying a real tree —\nlogging only the 1-node seed read as 'the tree is empty' while the pipeline\nwas healthy.",
          "is_bot": false,
          "headline": "fix(tao-a11y): re-arm the parked semantics walk when an AT connects w…",
          "author_name": "Elie G.",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T15:03:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ced0e2225b51417562c9f38e67f2d78adcde36b5",
          "body": "… nodes\n\npyatspi raised NotImplemented on queryAction: the InterfaceSet only included\nInterface::Action for clickable nodes, so the patched n_actions/do_action\nwere unreachable for nodes whose only actions are custom.",
          "is_bot": false,
          "headline": "fix(tao-linux-a11y): advertise the Action interface for custom-action…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T13:29:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "987f065ba282c3ec3299483e285b57c38e79615a",
          "body": "…the other fork patches",
          "is_bot": false,
          "headline": "fix(tao-linux-a11y): access custom actions through Node::data() like …",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T13:13:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edb356b2cd9a4d847d21efd51b519b79f8887612",
          "body": "… interface\n\nSurfaced by the advanced a11y probe: Compose CustomAccessibilityActions were\nreachable from VoiceOver (macOS rotor) but invisible to Orca — the vendored\naccesskit_atspi_common only exposed the synthetic 'click' action. n_actions/\nget_action_name/do_action now append the node's custom ac\n[…]\nick slot; do_action routes them as Action::CustomAction with the per-node\nindex, which the embedder side (linux/a11y.rs) already dispatches to\nKotlin's customActions list. Linux natives rebuilt by CI.",
          "is_bot": false,
          "headline": "fix(tao-linux-a11y): project custom actions through the AT-SPI Action…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T13:07:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "007cb5f9d4d747ca540070b935ab7c0ace812223",
          "body": null,
          "is_bot": false,
          "headline": "style(tao-a11y): split the debug trace line under the length limit",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T12:44:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c8c6c920c0878fdb9a5c2d3239376ac8d9baf45",
          "body": "The Windows CI investigation lost hours to a silent pipeline: no way to know\nwhether the sidecar DLL loaded, the HWND resolved, or the first snapshot was\npushed. Gated stderr traces at attach and first pushSnapshot; the tao-a11y\nWindows job sets the flag.",
          "is_bot": false,
          "headline": "debug(tao-a11y): NUCLEUS_A11Y_DEBUG traces the attach/push pipeline",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T12:43:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50b00dcced6ecae09cc47bbf159e92055dab657a",
          "body": "Probes now assert the advanced A11yTab sections, not just the basics:\n- disabled button: role survives AND the disabled state projects\n  (AX: AXButton + AXEnabled=false; UIA: IsEnabled=false; AT-SPI: no\n  STATE_ENABLED)\n- custom actions: labels ride the a11y channel and are performable\n  (AX action \n[…]\nled\nclickable path), so the label stayed a separate enabled static-text node and\nthe disabled button projected unlabeled — VoiceOver read 'Cannot press' as\nplain active text. Local AX probe: 7/7 PASS.",
          "is_bot": false,
          "headline": "test(tao-a11y): cover the advanced accessibility semantics per OS",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T12:40:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5546c815e7f977e763cf6673e852d9a3293976b",
          "body": "f3d-app/install-mesa-windows-action drops Mesa's software opengl32.dll next\nto java.exe (first hit in the DLL search order), so the Tao scene host can\ncreate its WGL context on hosted runners. This should turn the Windows UIA\na11y probe back into a hard gate (the self-skip stays as a safety net) and\ngive the headful suite real rendering.",
          "is_bot": false,
          "headline": "ci(tao): Mesa llvmpipe on Windows runners for a real WGL context",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T12:21:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ff6e5f798bcd6badf7494cc10541aba6b652212",
          "body": "Coroutine resumptions can enqueue from other threads; the unsynchronized\nArrayDeque corrupted rarely under load (NPE in pump on the Windows native\nrun, and the earlier animation/scroll flakes). ConcurrentLinkedQueue, same\nmodel as TaoMainDispatcher.",
          "is_bot": false,
          "headline": "test(tao-scene): thread-safe harness dispatcher queue",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T10:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d2ee3ba2861635ce4b314fd321133685bfb1373",
          "body": "…achable\n\nMirrors the macOS TCC self-skip: on hosted runners the software display\nadapter yields no WGL context, the scene never attaches and only the OS\nnonclient elements exist — nothing assertable, loud SKIPPED, exit 0. Any\npartial exposure with failing assertions still fails hard, and the job is\ngating again (continue-on-error removed).",
          "is_bot": false,
          "headline": "ci(tao-a11y): Windows probe self-skips only when the provider is unre…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T10:04:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8331e6d7cf876aeb5c210f7c3769d6911e9b625",
          "body": "A single non-invalidated frame can race the scroll/animation pipeline\nre-arming one dispatch later (rare 8px residue flake in the wheel-scroll\nsymmetry test on CI). Idle now requires 3 consecutive quiet frames.",
          "is_bot": false,
          "headline": "test(tao-scene): frameUntilIdle waits for consecutive quiet frames",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T09:46:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "069cae7e218f6bfefe511ffae10542d7440994f2",
          "body": "The hosted runner's software display adapter can't create the WGL context\nthe Tao scene host needs, so the app has no composed content and nothing to\nproject through UIA — confirmed by the proven manual dump tool seeing only\nnonclient elements while the same protocol passes on real hardware.\nmacOS (AX client, runner turned out to be TCC-trusted: 4/4 PASS in CI) and\nLinux (AT-SPI, doAction round-trip) remain hard gates.",
          "is_bot": false,
          "headline": "ci(tao-a11y): Windows leg best-effort on hosted runners (no WGL context)",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T09:28:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59d51fb4e47b21316a730d6b47e12e510d395224",
          "body": "…, proven dump tool)",
          "is_bot": false,
          "headline": "ci(tao-a11y): max diagnostics on Windows (full app log, java tasklist…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T09:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38f8370514bbe729714a6ca98b95a592a48e1400",
          "body": "FindAll uses the filtered control view, which never descended into the\ncustom UIA provider on the runner (only the 7 nonclient elements showed).\nscripts/dump-uia-tree.ps1 — validated during manual provider bring-up —\nwalks TreeWalker.RawViewWalker; the probe now does the same, and dumps the\nraw tree on failure.",
          "is_bot": false,
          "headline": "ci(tao-a11y): UIA probe walks the raw view like the proven manual tool",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T08:46:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22bdb2e82a9af2b72d0995c5bbd17b02160293e",
          "body": null,
          "is_bot": false,
          "headline": "ci(tao-a11y): survive probe failure under bash -e so the app log prints",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T08:21:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18d21fe09e0e1210ac96f26fa777310653df1944",
          "body": "…s log",
          "is_bot": false,
          "headline": "ci(tao-a11y): trace the app-side a11y pipeline on Windows and dump it…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T07:58:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd174daf5bf4ddfbc45063d41c03db9eaa6cd6db",
          "body": "…fallback\n\n- test-graalvm/tao-native-tests: execute the binary from graalvm/output\n  (the packaging step extracts skiko/jawt/icudtl next to it; the bare\n  nativeCompile artifact lacks them — Windows failed unpacking skiko).\n- verify-uia.ps1: dump the UIA descendant names when the A11y content is\n  missing, and try invoking the 'A11y' tab through UIA as a fallback.",
          "is_bot": false,
          "headline": "ci(tao): run the packaged native binary; UIA probe diagnostics + tab …",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T07:36:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cd6c6d5cb61f0ae0d1b79c9bd493bf0acdd429a",
          "body": "The prebuild step starts the Gradle daemon without NUCLEUS_DEMO_TAB; the\nlaunch step then reuses that daemon and JavaExec inherits ITS environment,\nso the app could open on the Demo tab instead of A11y (observed on the\nWindows runner). --no-daemon makes the app JVM inherit the step env\ndirectly. The UIA probe also fails cleanly now instead of null-crashing\nwhen an element is missing.",
          "is_bot": false,
          "headline": "ci(tao-a11y): launch tao-demo with --no-daemon and guard the UIA probe",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T07:12:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "058b42d85729055b67f028b40711b22c2cc33094",
          "body": "tao-demo's build graph reaches decorated-window-jni's buildNativeLinux,\nwhich fails on runners without X11 dev headers; ship the prebuilt artifacts\nlike the main gradle job does.",
          "is_bot": false,
          "headline": "ci(tao-a11y): download the transitive modules' native artifacts",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T06:53:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "948fa11d78b47eb68a78d119d1a68370339065da",
          "body": null,
          "is_bot": false,
          "headline": "ci(test-packaging): trigger for PRs whose base branch contains a slash",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T06:42:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "095f4fcb4ae1c0466ff20401102ce3d355190299",
          "body": null,
          "is_bot": false,
          "headline": "ci(test-graalvm): trigger for PRs whose base branch contains a slash",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T06:41:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6c103f71482c0c8d9a98e621c36cab1d90476a1",
          "body": "All three first-run failures were the same race: the probe's 120s window was\nconsumed by the cold gradle compile of tao-demo on a fresh runner. Build the\njar in a prior step and give the probes 300s.",
          "is_bot": false,
          "headline": "ci(tao-a11y): pre-build tao-demo before probing and widen probe timeouts",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T06:41:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b69fb5b30355990a3b3083225e724a13c2bffd42",
          "body": "…ocol\n\nGraalVM native-image testing (examples/tao-native-test):\n- New runner app (nucleus plugin, graalvm enabled) that compiles the whole\n  Tao test pyramid into a native binary and RUNS it — the first place a\n  produced native image is actually executed in CI (test-graalvm.yaml only\n  compiled nuc\n[…]\n- macOS: verify-ax.swift — AX client dump (axdump/axtool derived);\n    self-skips on runners without the TCC Accessibility permission.\n    Verified locally: 4/4 elements exposed, 53 named accessibles.",
          "is_bot": false,
          "headline": "test(tao): GraalVM native test pyramid + native accessibility CI prot…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T06:22:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3a799d3392af1c3e1cbf2add4aeffe0b53d25b5",
          "body": "…ilent no-op\n\nSurfaced by the stage-2 headful suite: an unmaximize issued while the\nmaximize animation is still in flight left the window stuck zoomed.\n\nRoot cause: set_maximized dedups on is_zoomed(), which compares the live\nframe to screen.visibleFrame — mid-animation the frame matches neither end\n[…]\nt.\nAlso unskips the Linux move/maximize/minimize cases: the CI display uses\nopenbox (floating, iconify-capable), not a tiling WM.\n\nmacOS natives rebuilt; Linux/Windows rebuilt by CI. Local suite: 6/6.",
          "is_bot": false,
          "headline": "fix(tao-macos): setMaximized(false) during the zoom animation was a s…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T05:50:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0b6f4ed13f69d65e4c810f437d37fba73fa4348",
          "body": "…splay infra\n\nStage 2 of the testing pyramid: real Tao windows driven end-to-end, one\nprocess, one event loop (Compose Desktop's runApplicationTest model — the\nTao loop runs once per process, so no forkEvery).\n\n- headful/TaoWindowTestHarness.kt: TaoWindowTestCase/TaoWindowTestScope with\n  suspending\n[…]\nd() doesn't recognize it, so restore early-returns.\n- CI: new tao-headful matrix job — plain runners on macOS/Windows, Xvfb +\n  openbox + Mesa on Linux.\n\nLocal run (macOS): 6 run, 0 skipped, 0 failed.",
          "is_bot": false,
          "headline": "test(decorated-window-tao): stage-2 headful window suite + 3-OS CI di…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T05:24:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2bdf2e009f7d4d3d53e88cad6acf6335025cc329",
          "body": "'*' does not cross '/' in GitHub branch filters, so PRs based on\nrefactor/* or feature/* branches never ran Pre Merge Checks.",
          "is_bot": false,
          "headline": "ci: trigger pre-merge for PRs whose base branch contains a slash",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T04:40:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17613c94ead6a57efece6fb09eeb4bf810ce6f2c",
          "body": "…ttery\n\nJetBrains-style testing pyramid, stage 1 (the bulk tier): an offscreen,\nfully deterministic test harness for the Tao Compose backend, mirroring how\nCompose Desktop tests the scene without a window.\n\n- TaoSceneTestHarness (test sources): builds the same CanvasLayersComposeScene\n  the host use\n[…]\nere blocking check\n  (ComplexCondition in DecoratedWindow, swallowed/generic catch + magic\n  number in TaoHotReloadBridgeImpl, missing final newline, consecutive KDoc\n  in NucleusPlatformViewFactory).",
          "is_bot": false,
          "headline": "test(decorated-window-tao): stage-1 offscreen scene test harness + ba…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-19T04:36:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d76a934739e43d03d3309c4250e1c0185b3e9f7c",
          "body": "JetBrains convention (kotlin-desktop-toolkit): explicitApi() is now enforced,\nso every public declaration states its visibility and public vals/funs their\nreturn type. 219 explicit 'public' modifiers added; explicit types on the\nTaoA11y* const vals (Int), TaoDnDDiagnostics states and LocalTaoWindow.\n[…]\n apiCheck passes against the untouched baseline dump, all\nconsumers compile unchanged, invariant checker green. From here the public\nsurface can only change deliberately (apiDump diff reviewed in PR).",
          "is_bot": false,
          "headline": "refactor(decorated-window-tao): enable explicitApi strict mode (phase 3)",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T21:39:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d5f9a72fef89e4c921b68e2724bcbee5786ccb86",
          "body": "…es (phase 2)\n\nJetBrains-like layout: internal-only declarations move out of the flat\nwindow.tao / window.tao.render packages into per-subsystem packages, KDT-style\n(files named by concern, one subsystem per package):\n\n- event/     key mapping, keyboard modifiers, synthetic key/wheel events,\n       \n[…]\nTA-INF/services MainDispatcherFactory, ProGuard keep rules, GraalVM\nreachability metadata (module + plugin macos). No native change needed:\nno JNI export or FindClass literal references a moved class.",
          "is_bot": false,
          "headline": "refactor(decorated-window-tao): split internals into subsystem packag…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T21:35:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97fecf7e42767038565dd495ef7197e50fe6d9b3",
          "body": "…ffi (phase 1)\n\nJetBrains-like layout (kotlin-desktop-toolkit style): all JNI bridge objects\n(NativeTao*, NativeMetalBridge, PopupNativeBridge*) move to the internal-only\npackage dev.nucleusframework.window.tao.ffi, mirroring KDT's quarantined\n'.generated' binding packages.\n\nPublic API is untouched \n[…]\nrebuilt; Linux/Windows rebuilt by CI build-natives\n- tao-demo test reflection literal (only consumer-side change, test-only)\n\nPre-existing detekt findings (5, TaoHotReload*/DecoratedWindow) unchanged.",
          "is_bot": false,
          "headline": "refactor(decorated-window-tao): quarantine JNI bridges in window.tao.…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T21:27:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a62f1cf5453d9b90a0e522354ae3f53815bdf1ba",
          "body": "- REFACTOR_VERIFICATION.md: invariants + per-phase test procedure for the\n  JetBrains-like package reorganization (BCV ABI freeze, JNI/FQN coupling\n  checker, consumer-compile gate, runtime smoke, CI matrix gate)\n- scripts/check-tao-refactor-invariants.sh: cross-checks compiled classes\n  against JNI\n[…]\n.forName, META-INF/services, ProGuard rules and GraalVM metadata\n- binary-compatibility-validator applied to decorated-window-tao with the\n  baseline API dump committed under decorated-window-tao/api/",
          "is_bot": false,
          "headline": "test(decorated-window-tao): add refactor verification harness",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T21:16:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3fa46ed2ea86d98bbdf4f8a6bc5a72e137354e2",
          "body": "…-thread\n\nfix(tao-windows): run the WH_MOUSE_LL outside-click hook on a dedicated native thread",
          "is_bot": false,
          "headline": "Merge pull request #370 from NucleusFramework/fix/tao-windows-ll-hook…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T19:11:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2522da740a511590bc1990e8a99ef53fca212231",
          "body": "…ed native thread\n\nLL hook callbacks are pumped by the installing thread. Installing from the\nTao event loop tied the system-wide mouse to that thread's responsiveness:\nlong Java work (first composition, GC safepoints) stopped the pump and every\nOS mouse event stalled on LowLevelHooksTimeout (~300 m\n[…]\nwith an init handshake so install/uninstall cannot leak the hook. The\nproc's whole pass runs under sOpenListLock: off the Tao thread, popup\ndestruction could otherwise free a PopupState mid-iteration.",
          "is_bot": false,
          "headline": "fix(tao-windows): run the WH_MOUSE_LL outside-click hook on a dedicat…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T19:00:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "35a8234fe26dc5dac854186f54a1e2aba23e4377",
          "body": "fix(rpm): own app/runtime dirs so the jpackage launcher finds its .cfg",
          "is_bot": false,
          "headline": "Merge pull request #369 from NucleusFramework/fix/rpm-app-dir-entries",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T18:55:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d245bb4c47fef12c4289697fc87f668e1220753e",
          "body": "electron-builder builds RPMs via fpm, which lists only files and never emits\n%dir entries for the app's own directory tree. The jpackage launcher\n(libapplauncher.so, Package.cpp::initAppLauncher) discovers the app and runtime\ndirectories by running `rpm -ql <pkg>` and matching lines that endWith \"/a\n[…]\nroring what\njpackage's own template.spec does with `comm -23` against the filesystem\npackage. DEB was never affected because `dpkg -L` already lists directories.\n\nAddresses #251 (launcher .cfg error).",
          "is_bot": false,
          "headline": "fix(rpm): own app/runtime dirs so the jpackage launcher finds its .cfg",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T18:51:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57db5cc681816a3591b889cb4c587f48b9027099",
          "body": "…local\n\nfix(decorated-window-tao): load GTK with RTLD_LOCAL to stop sqlite interposition",
          "is_bot": false,
          "headline": "Merge pull request #368 from NucleusFramework/fix/tao-linux-gtk-rtld-…",
          "author_name": "Elie Gambache",
          "author_login": "kdroidFilter",
          "committed_at": "2026-07-18T18:37:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 2023,
      "latest_release_at": "2026-07-23T18:59:15Z",
      "latest_release_tag": "v2.1.6",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 24,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 1.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 17,
      "stars": 308,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-02-22",
            "count": 1
          },
          {
            "date": "2026-02-24",
            "count": 1
          },
          {
            "date": "2026-02-25",
            "count": 1
          },
          {
            "date": "2026-03-07",
            "count": 1
          },
          {
            "date": "2026-03-10",
            "count": 1
          },
          {
            "date": "2026-03-22",
            "count": 1
          },
          {
            "date": "2026-04-30",
            "count": 1
          },
          {
            "date": "2026-05-08",
            "count": 1
          },
          {
            "date": "2026-05-12",
            "count": 1
          },
          {
            "date": "2026-05-15",
            "count": 1
          },
          {
            "date": "2026-06-04",
            "count": 1
          },
          {
            "date": "2026-06-08",
            "count": 1
          },
          {
            "date": "2026-06-09",
            "count": 1
          },
          {
            "date": "2026-06-27",
            "count": 1
          },
          {
            "date": "2026-07-06",
            "count": 1
          },
          {
            "date": "2026-07-13",
            "count": 1
          },
          {
            "date": "2026-07-17",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 17,
        "total_forks": 17
      },
      "star_history": null,
      "open_issues_and_prs": 24
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "example",
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "aot-runtime/build.gradle.kts",
        "autolaunch/build.gradle.kts",
        "build.gradle.kts",
        "core-runtime/build.gradle.kts",
        "darkmode-detector/build.gradle.kts",
        "decorated-window-awt/build.gradle.kts",
        "decorated-window-core/build.gradle.kts",
        "decorated-window-jbr/build.gradle.kts",
        "decorated-window-jewel/build.gradle.kts",
        "decorated-window-jni/build.gradle.kts",
        "decorated-window-material2/build.gradle.kts",
        "decorated-window-material3/build.gradle.kts",
        "decorated-window-tao/build.gradle.kts",
        "decorated-window-tao/src/main/native/Cargo.toml",
        "decorated-window-tao/src/main/native/vendor/accesskit_atspi_common/Cargo.toml",
        "decorated-window-tao/src/main/native/vendor/accesskit_unix/Cargo.toml",
        "decorated-window-tao/src/main/native/vendor/tao/Cargo.toml",
        "energy-manager/build.gradle.kts",
        "examples/benchmark-demo/build.gradle.kts",
        "examples/benchmark-demo/ports/tauri/src-tauri/Cargo.toml",
        "examples/cmp-demo/build.gradle.kts",
        "examples/compose-demo/build.gradle.kts",
        "examples/extra-launcher-demo/build.gradle.kts",
        "examples/fs-watcher-smoke/build.gradle.kts",
        "examples/jewel-demo/build.gradle.kts",
        "examples/jni-demo/build.gradle.kts",
        "examples/nucleus-demo/build.gradle.kts",
        "examples/scheduler-demo/build.gradle.kts",
        "examples/service-management-demo/build.gradle.kts",
        "examples/shared/build.gradle.kts",
        "examples/swing-tao-demo/build.gradle.kts",
        "examples/system-info-demo/build.gradle.kts",
        "examples/tao-demo/build.gradle.kts",
        "examples/tao-native-test/build.gradle.kts",
        "examples/zstd-demo/build.gradle.kts",
        "freedesktop-icons/build.gradle.kts",
        "fs-watcher/build.gradle.kts",
        "fs-watcher/src/main/native/Cargo.toml",
        "global-hotkey/build.gradle.kts",
        "graalvm-runtime/build.gradle.kts",
        "launcher-linux/build.gradle.kts",
        "launcher-macos/build.gradle.kts",
        "launcher-windows/build.gradle.kts",
        "linux-hidpi/build.gradle.kts",
        "media-control/build.gradle.kts",
        "menu-macos/build.gradle.kts",
        "native-http-ktor/build.gradle.kts",
        "native-http-okhttp/build.gradle.kts",
        "native-http/build.gradle.kts",
        "native-ssl/build.gradle.kts",
        "notification-common/build.gradle.kts",
        "notification-linux/build.gradle.kts",
        "notification-macos/build.gradle.kts",
        "notification-windows/build.gradle.kts",
        "nucleus-application/build.gradle.kts",
        "plugin-build/build.gradle.kts",
        "plugin-build/plugin/build.gradle.kts",
        "scheduler-testing/build.gradle.kts",
        "scheduler/build.gradle.kts",
        "scripts/uia-listener/UiaListener.csproj",
        "service-management-macos/build.gradle.kts",
        "sf-symbols/build.gradle.kts",
        "system-color/build.gradle.kts",
        "system-info/build.gradle.kts",
        "taskbar-progress-tao/build.gradle.kts",
        "taskbar-progress/build.gradle.kts",
        "updater-runtime/build.gradle.kts"
      ],
      "largest_source_bytes": 166094,
      "source_files_sampled": 1163,
      "oversized_source_files": 12,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md",
        "examples/benchmark-demo/AGENTS.md"
      ],
      "agent_instruction_max_bytes": 10610
    },
    "dependencies": {
      "manifests": [
        "aot-runtime/build.gradle.kts",
        "autolaunch/build.gradle.kts",
        "build.gradle.kts",
        "core-runtime/build.gradle.kts",
        "darkmode-detector/build.gradle.kts",
        "decorated-window-awt/build.gradle.kts",
        "decorated-window-core/build.gradle.kts",
        "decorated-window-jbr/build.gradle.kts",
        "decorated-window-jewel/build.gradle.kts",
        "decorated-window-jni/build.gradle.kts",
        "decorated-window-material2/build.gradle.kts",
        "decorated-window-material3/build.gradle.kts",
        "decorated-window-tao/build.gradle.kts",
        "energy-manager/build.gradle.kts",
        "freedesktop-icons/build.gradle.kts",
        "fs-watcher/build.gradle.kts",
        "global-hotkey/build.gradle.kts",
        "graalvm-runtime/build.gradle.kts",
        "launcher-linux/build.gradle.kts",
        "launcher-macos/build.gradle.kts",
        "launcher-windows/build.gradle.kts",
        "linux-hidpi/build.gradle.kts",
        "media-control/build.gradle.kts",
        "menu-macos/build.gradle.kts",
        "native-http-ktor/build.gradle.kts",
        "native-http-okhttp/build.gradle.kts",
        "native-http/build.gradle.kts",
        "native-ssl/build.gradle.kts",
        "notification-common/build.gradle.kts",
        "notification-linux/build.gradle.kts",
        "notification-macos/build.gradle.kts",
        "notification-windows/build.gradle.kts",
        "nucleus-application/build.gradle.kts",
        "plugin-build/build.gradle.kts",
        "scheduler-testing/build.gradle.kts",
        "scheduler/build.gradle.kts",
        "service-management-macos/build.gradle.kts",
        "sf-symbols/build.gradle.kts",
        "system-color/build.gradle.kts",
        "system-info/build.gradle.kts",
        "taskbar-progress-tao/build.gradle.kts",
        "taskbar-progress/build.gradle.kts",
        "updater-runtime/build.gradle.kts"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "Interop.UIAutomationClient",
          "manifest": "scripts/uia-listener/UiaListener.csproj",
          "ecosystem": "nuget",
          "version_constraint": "10.19041.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 6,
        "merged_prs": 271,
        "open_issues": 18,
        "closed_ratio": 0.806,
        "closed_issues": 75,
        "closed_unmerged_prs": 23
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "kdroidFilter",
          "commits": 1977,
          "avatar_url": "https://avatars.githubusercontent.com/u/144903939?v=4"
        },
        {
          "type": "User",
          "login": "sproctor",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/217337?v=4"
        },
        {
          "type": "User",
          "login": "RavenLiao",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/47520028?v=4"
        },
        {
          "type": "User",
          "login": "amir1376",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/38394888?v=4"
        },
        {
          "type": "User",
          "login": "23rd",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/4051126?v=4"
        },
        {
          "type": "User",
          "login": "mipastgt",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/16735714?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.988
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-natives.yaml",
        "pre-merge.yaml",
        "publish-maven.yaml",
        "publish-plugin.yaml",
        "release-desktop.yaml",
        "release-graalvm.yaml",
        "test-graalvm.yaml",
        "test-packaging.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 8,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/9 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "26 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "1e9c35fc653f8b3e454e37b6354b9b1e5fef6c04",
        "ran_at": "2026-07-24T07:10:39Z",
        "aggregate_score": 4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T18:42:25Z",
      "oldest_open_prs": [
        {
          "number": 255,
          "created_at": "2026-05-29T14:10:25Z",
          "last_comment_at": "2026-06-01T11:06:29Z",
          "last_comment_author": "kdroidFilter"
        },
        {
          "number": 354,
          "created_at": "2026-07-16T22:15:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 372,
          "created_at": "2026-07-19T04:30:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 391,
          "created_at": "2026-07-21T18:20:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 393,
          "created_at": "2026-07-22T06:30:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 396,
          "created_at": "2026-07-23T19:10:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T18:22:48Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 52,
          "created_at": "2026-02-23T11:01:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 129,
          "created_at": "2026-03-20T15:10:20Z",
          "last_comment_at": "2026-03-21T17:02:42Z",
          "last_comment_author": "kdroidFilter"
        },
        {
          "number": 158,
          "created_at": "2026-03-26T20:33:33Z",
          "last_comment_at": "2026-04-09T11:15:55Z",
          "last_comment_author": "kdroidFilter"
        },
        {
          "number": 178,
          "created_at": "2026-04-09T11:16:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 188,
          "created_at": "2026-04-11T08:10:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 202,
          "created_at": "2026-04-16T15:34:18Z",
          "last_comment_at": "2026-04-16T18:44:52Z",
          "last_comment_author": "kdroidFilter"
        },
        {
          "number": 210,
          "created_at": "2026-04-19T12:18:22Z",
          "last_comment_at": "2026-07-12T13:25:44Z",
          "last_comment_author": "kdroidFilter"
        },
        {
          "number": 225,
          "created_at": "2026-05-05T09:17:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 249,
          "created_at": "2026-05-18T19:24:13Z",
          "last_comment_at": "2026-06-08T06:49:12Z",
          "last_comment_author": "toBYTEas"
        },
        {
          "number": 264,
          "created_at": "2026-06-16T07:18:56Z",
          "last_comment_at": "2026-06-22T10:49:17Z",
          "last_comment_author": "GaodaGG"
        },
        {
          "number": 269,
          "created_at": "2026-06-24T12:08:42Z",
          "last_comment_at": "2026-06-25T02:08:46Z",
          "last_comment_author": "xiaolei123"
        },
        {
          "number": 303,
          "created_at": "2026-07-12T03:23:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 327,
          "created_at": "2026-07-13T07:31:59Z",
          "last_comment_at": "2026-07-19T08:41:19Z",
          "last_comment_author": "janbarari"
        },
        {
          "number": 332,
          "created_at": "2026-07-13T13:58:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 350,
          "created_at": "2026-07-16T05:56:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 383,
          "created_at": "2026-07-21T07:13:05Z",
          "last_comment_at": "2026-07-21T08:32:54Z",
          "last_comment_author": "alexandrucaraus"
        },
        {
          "number": 394,
          "created_at": "2026-07-23T09:49:01Z",
          "last_comment_at": "2026-07-23T19:37:18Z",
          "last_comment_author": "tomasjablonskis"
        },
        {
          "number": 397,
          "created_at": "2026-07-24T02:15:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/NucleusFramework/Nucleus",
    "host": "github.com",
    "name": "Nucleus",
    "owner": "NucleusFramework"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 59,
      "inputs": {
        "security": 40,
        "vitality": 85,
        "community": 53,
        "governance": 45,
        "engineering": 70
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 85,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "commits_last_year": 2023,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 24
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "24/52 weeks with commits",
                "points": 16.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 24
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "2023 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 2023
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v2.1.6",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 1.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 53,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "forks": 17,
              "stars": 308,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "308 stars",
                "points": 40.3,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 308
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "17 forks",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 45,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 23,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.988
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 99% of commits",
                "points": 0.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "merged_prs": 271,
              "open_issues": 18,
              "closed_issues": 75,
              "issue_closed_ratio": 0.806,
              "closed_unmerged_prs": 23
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "81% of issues closed",
                "points": 37.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 81
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "271/294 decided PRs merged",
                "points": 35.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 271,
                      "decided": 294
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/9 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "followers": 8,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "NucleusFramework",
              "public_repos": 6,
              "account_age_days": 74
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of NucleusFramework",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "NucleusFramework"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "6 public repos, account ~0 yr old",
                "points": 6.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 6
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 70,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "compose",
                "compose-desktop",
                "compose-multiplatform",
                "desktop",
                "desktop-app",
                "framework",
                "jvm",
                "kotlin",
                "linux",
                "macos",
                "native",
                "windows"
              ],
              "has_wiki": false,
              "homepage": "http://nucleusframework.dev/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://nucleusframework.dev/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "12 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 40,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/9 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "26 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 70,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md",
                "examples/benchmark-demo/AGENTS.md"
              ],
              "agent_instruction_max_bytes": 10610
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md, examples/benchmark-demo/AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md, examples/benchmark-demo/AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [
                "aot-runtime/build.gradle.kts",
                "autolaunch/build.gradle.kts",
                "build.gradle.kts",
                "core-runtime/build.gradle.kts",
                "darkmode-detector/build.gradle.kts",
                "decorated-window-awt/build.gradle.kts",
                "decorated-window-core/build.gradle.kts",
                "decorated-window-jbr/build.gradle.kts",
                "decorated-window-jewel/build.gradle.kts",
                "decorated-window-jni/build.gradle.kts",
                "decorated-window-material2/build.gradle.kts",
                "decorated-window-material3/build.gradle.kts",
                "decorated-window-tao/build.gradle.kts",
                "decorated-window-tao/src/main/native/Cargo.toml",
                "decorated-window-tao/src/main/native/vendor/accesskit_atspi_common/Cargo.toml",
                "decorated-window-tao/src/main/native/vendor/accesskit_unix/Cargo.toml",
                "decorated-window-tao/src/main/native/vendor/tao/Cargo.toml",
                "energy-manager/build.gradle.kts",
                "examples/benchmark-demo/build.gradle.kts",
                "examples/benchmark-demo/ports/tauri/src-tauri/Cargo.toml",
                "examples/cmp-demo/build.gradle.kts",
                "examples/compose-demo/build.gradle.kts",
                "examples/extra-launcher-demo/build.gradle.kts",
                "examples/fs-watcher-smoke/build.gradle.kts",
                "examples/jewel-demo/build.gradle.kts",
                "examples/jni-demo/build.gradle.kts",
                "examples/nucleus-demo/build.gradle.kts",
                "examples/scheduler-demo/build.gradle.kts",
                "examples/service-management-demo/build.gradle.kts",
                "examples/shared/build.gradle.kts",
                "examples/swing-tao-demo/build.gradle.kts",
                "examples/system-info-demo/build.gradle.kts",
                "examples/tao-demo/build.gradle.kts",
                "examples/tao-native-test/build.gradle.kts",
                "examples/zstd-demo/build.gradle.kts",
                "freedesktop-icons/build.gradle.kts",
                "fs-watcher/build.gradle.kts",
                "fs-watcher/src/main/native/Cargo.toml",
                "global-hotkey/build.gradle.kts",
                "graalvm-runtime/build.gradle.kts",
                "launcher-linux/build.gradle.kts",
                "launcher-macos/build.gradle.kts",
                "launcher-windows/build.gradle.kts",
                "linux-hidpi/build.gradle.kts",
                "media-control/build.gradle.kts",
                "menu-macos/build.gradle.kts",
                "native-http-ktor/build.gradle.kts",
                "native-http-okhttp/build.gradle.kts",
                "native-http/build.gradle.kts",
                "native-ssl/build.gradle.kts",
                "notification-common/build.gradle.kts",
                "notification-linux/build.gradle.kts",
                "notification-macos/build.gradle.kts",
                "notification-windows/build.gradle.kts",
                "nucleus-application/build.gradle.kts",
                "plugin-build/build.gradle.kts",
                "plugin-build/plugin/build.gradle.kts",
                "scheduler-testing/build.gradle.kts",
                "scheduler/build.gradle.kts",
                "scripts/uia-listener/UiaListener.csproj",
                "service-management-macos/build.gradle.kts",
                "sf-symbols/build.gradle.kts",
                "system-color/build.gradle.kts",
                "system-info/build.gradle.kts",
                "taskbar-progress-tao/build.gradle.kts",
                "taskbar-progress/build.gradle.kts",
                "updater-runtime/build.gradle.kts"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "aot-runtime/build.gradle.kts, autolaunch/build.gradle.kts, build.gradle.kts (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "aot-runtime/build.gradle.kts, autolaunch/build.gradle.kts, build.gradle.kts"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Kotlin (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Kotlin"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Kotlin",
              "largest_source_bytes": 166094,
              "source_files_sampled": 1163,
              "oversized_source_files": 12
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Kotlin (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Kotlin"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "12/1163 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 1163,
                      "oversized": 12
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "example",
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "example, examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "example, examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T07:11:02.174539Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/NucleusFramework/Nucleus.svg",
  "full_name": "NucleusFramework/Nucleus",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken.