SanderMuller/laravel-fluent-validation erreicht einen Gesundheitsindex von 69 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (90/100) ab, am schwächsten bei Community & Adoption (54/100). Zuletzt vor 3 Tagen aktualisiert. 2 Mitwirkende tragen den Großteil der jüngsten Arbeit.
69
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
69
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
50 Follower68 öffentliche Reposseit Okt. 2014@blinqx-vh and @hihaho
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Die verbleibenden Gewichte wurden renormalisiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Belegte Agentenpraxis — 6 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8
Automatisierte Wartung — 3 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
0/10
OpenSSF Scorecard: Pinned-Dependencies — keine Daten
Verwendete Eingangsdaten
has_nix
nein
has_tests
ja
lockfiles
—
has_dockerfile
nein
typed_language
nein
bootstrap_files
—
has_devcontainer
nein
has_linter_config
nein
typecheck_configs
—
agent_commit_share
0,06
toolchain_manifests
—
dependency_bot_commit_share
0,03
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Pinned-Dependencies. Die verbleibenden Gewichte wurden renormalisiert.
Typprüfbarer Code — PHP ohne Typprüfungs-Konfiguration
54.3/55
Handhabbare Dateigrößen — 2/158 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
PHP
largest_source_bytes
105.804
source_files_sampled
158
oversized_source_files
2
Eckdaten
211GitHub-Sterne
98Mitwirkende
541Commits, letzte 12 Monate
3Tage seit letztem Push
78Releases
2Bus-Faktor
0offene Issues
PackagistPaket-Ökosysteme
Warnungen zur Datenerhebung
No resolved dependencies carried a version and a supported ecosystem
Weitere Details
Stern- und Fork-Verlauf 211 ★ / 2 ⇿
211Sterne
2Forks
77Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 1Minor 37Patch 39
OpenSSF Scorecard 6.1 / 10
6.1Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-21 20:18 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 4 direkte und 24 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
Packagist
illuminate/contracts
—
direkt
Packagist
illuminate/http
—
direkt
Packagist
illuminate/support
—
direkt
Packagist
illuminate/validation
—
direkt
Packagist
driftingly/rector-laravel
—
indirekt
Packagist
larastan/larastan
—
indirekt
Packagist
laravel/pao
—
indirekt
Packagist
laravel/pint
—
indirekt
Packagist
livewire/livewire
—
indirekt
Packagist
mrpunyapal/rector-pest
—
indirekt
Packagist
nunomaduro/collision
—
indirekt
Packagist
orchestra/testbench
—
indirekt
Packagist
pestphp/pest
—
indirekt
Packagist
pestphp/pest-plugin-arch
—
indirekt
Packagist
pestphp/pest-plugin-laravel
—
indirekt
Packagist
php
—
indirekt
Packagist
phpstan/extension-installer
—
indirekt
Packagist
phpstan/phpstan-deprecation-rules
—
indirekt
Packagist
phpstan/phpstan-phpunit
—
indirekt
Packagist
phpstan/phpstan-strict-rules
—
indirekt
Packagist
rector/rector
—
indirekt
Packagist
rector/type-perfect
—
indirekt
Packagist
sandermuller/boost-skills
—
indirekt
Packagist
sandermuller/package-boost-laravel
—
indirekt
Packagist
spaze/phpstan-disallowed-calls
—
indirekt
Packagist
symplify/phpstan-extensions
—
indirekt
Packagist
tomasvotruba/cognitive-complexity
—
indirekt
Packagist
tomasvotruba/type-coverage
—
indirekt
Abhängigkeits-Advisories nicht bewertet
Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies carried a version and a supported ecosystem
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2334,
"has_wiki": false,
"homepage": null,
"languages": {
"PHP": 1304211
},
"pushed_at": "2026-07-18T12:38:26Z",
"created_at": "2026-04-02T21:12:41Z",
"owner_type": "User",
"updated_at": "2026-07-18T12:38:29Z",
"description": "Fluent and extremely fast validation for Laravel",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": null,
"name": "Sander Muller",
"type": "User",
"login": "SanderMuller",
"company": "@blinqx-vh and @hihaho",
"location": "Netherlands",
"followers": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/9074391?v=4",
"created_at": "2014-10-08T09:16:45Z",
"is_verified": null,
"public_repos": 68,
"account_age_days": 4304
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "1.33.0",
"kind": "minor",
"published_at": "2026-07-16T16:34:20Z"
},
{
"tag": "1.32.0",
"kind": "minor",
"published_at": "2026-07-13T10:33:34Z"
},
{
"tag": "1.31.0",
"kind": "minor",
"published_at": "2026-07-04T21:24:20Z"
},
{
"tag": "1.30.1",
"kind": "patch",
"published_at": "2026-06-18T15:24:29Z"
},
{
"tag": "1.30.0",
"kind": "minor",
"published_at": "2026-06-18T12:47:14Z"
},
{
"tag": "1.29.0",
"kind": "minor",
"published_at": "2026-06-14T12:03:48Z"
},
{
"tag": "1.28.1",
"kind": "patch",
"published_at": "2026-06-14T11:14:53Z"
},
{
"tag": "1.28.0",
"kind": "minor",
"published_at": "2026-06-13T22:21:06Z"
},
{
"tag": "1.27.3",
"kind": "patch",
"published_at": "2026-06-02T20:36:01Z"
},
{
"tag": "1.27.2",
"kind": "patch",
"published_at": "2026-06-02T13:11:11Z"
},
{
"tag": "1.27.1",
"kind": "patch",
"published_at": "2026-05-11T20:50:49Z"
},
{
"tag": "1.27.0",
"kind": "minor",
"published_at": "2026-05-11T15:09:20Z"
},
{
"tag": "1.26.0",
"kind": "minor",
"published_at": "2026-05-10T14:56:43Z"
},
{
"tag": "1.25.0",
"kind": "minor",
"published_at": "2026-04-29T15:00:34Z"
},
{
"tag": "1.24.0",
"kind": "minor",
"published_at": "2026-04-24T06:58:28Z"
},
{
"tag": "1.23.0",
"kind": "minor",
"published_at": "2026-04-23T20:46:04Z"
},
{
"tag": "1.22.0",
"kind": "minor",
"published_at": "2026-04-23T13:55:22Z"
},
{
"tag": "1.21.0",
"kind": "minor",
"published_at": "2026-04-22T19:06:46Z"
},
{
"tag": "1.20.0",
"kind": "minor",
"published_at": "2026-04-22T16:39:28Z"
},
{
"tag": "1.19.0",
"kind": "minor",
"published_at": "2026-04-22T06:44:41Z"
},
{
"tag": "1.18.0",
"kind": "minor",
"published_at": "2026-04-21T10:45:15Z"
},
{
"tag": "1.17.1",
"kind": "patch",
"published_at": "2026-04-20T21:02:26Z"
},
{
"tag": "1.17.0",
"kind": "minor",
"published_at": "2026-04-20T18:42:37Z"
},
{
"tag": "1.16.0",
"kind": "minor",
"published_at": "2026-04-20T16:05:24Z"
},
{
"tag": "1.15.1",
"kind": "patch",
"published_at": "2026-04-20T12:49:18Z"
},
{
"tag": "1.15.0",
"kind": "minor",
"published_at": "2026-04-19T21:01:14Z"
},
{
"tag": "1.14.0",
"kind": "minor",
"published_at": "2026-04-19T19:43:57Z"
},
{
"tag": "1.13.2",
"kind": "patch",
"published_at": "2026-04-19T17:19:48Z"
},
{
"tag": "1.13.1",
"kind": "patch",
"published_at": "2026-04-19T14:30:57Z"
},
{
"tag": "1.13.0",
"kind": "minor",
"published_at": "2026-04-19T14:22:20Z"
},
{
"tag": "1.12.3",
"kind": "patch",
"published_at": "2026-04-19T09:17:04Z"
},
{
"tag": "1.12.2",
"kind": "patch",
"published_at": "2026-04-18T23:07:35Z"
},
{
"tag": "1.12.1",
"kind": "patch",
"published_at": "2026-04-18T22:20:10Z"
},
{
"tag": "1.12.0",
"kind": "minor",
"published_at": "2026-04-18T22:18:51Z"
},
{
"tag": "1.11.0",
"kind": "minor",
"published_at": "2026-04-17T22:45:20Z"
},
{
"tag": "1.10.0",
"kind": "minor",
"published_at": "2026-04-17T15:10:12Z"
},
{
"tag": "1.9.2",
"kind": "patch",
"published_at": "2026-04-17T12:06:36Z"
},
{
"tag": "1.9.1",
"kind": "patch",
"published_at": "2026-04-17T11:05:49Z"
},
{
"tag": "1.9.0",
"kind": "minor",
"published_at": "2026-04-15T16:43:32Z"
},
{
"tag": "1.8.2",
"kind": "patch",
"published_at": "2026-04-15T11:43:24Z"
},
{
"tag": "1.8.1",
"kind": "patch",
"published_at": "2026-04-15T09:06:14Z"
},
{
"tag": "1.8.0",
"kind": "minor",
"published_at": "2026-04-15T07:59:16Z"
},
{
"tag": "1.7.1",
"kind": "patch",
"published_at": "2026-04-14T20:59:21Z"
},
{
"tag": "1.7.0",
"kind": "minor",
"published_at": "2026-04-14T20:56:31Z"
},
{
"tag": "1.6.0",
"kind": "minor",
"published_at": "2026-04-12T16:01:08Z"
},
{
"tag": "1.5.0",
"kind": "minor",
"published_at": "2026-04-12T15:52:40Z"
},
{
"tag": "1.4.1",
"kind": "patch",
"published_at": "2026-04-10T22:38:14Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2026-04-10T22:23:48Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2026-04-10T17:51:42Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2026-04-10T13:50:30Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2026-04-08T14:20:34Z"
},
{
"tag": "1.0.1",
"kind": "patch",
"published_at": "2026-04-07T08:10:47Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2026-04-06T21:22:34Z"
},
{
"tag": "0.5.3",
"kind": "patch",
"published_at": "2026-04-06T19:37:38Z"
},
{
"tag": "0.5.2",
"kind": "patch",
"published_at": "2026-04-06T14:33:20Z"
},
{
"tag": "0.5.1",
"kind": "patch",
"published_at": "2026-04-06T14:21:26Z"
},
{
"tag": "0.5.0",
"kind": "minor",
"published_at": "2026-04-06T13:27:28Z"
},
{
"tag": "0.4.5",
"kind": "patch",
"published_at": "2026-04-06T12:30:14Z"
},
{
"tag": "0.4.4",
"kind": "patch",
"published_at": "2026-04-06T12:16:54Z"
},
{
"tag": "0.4.3",
"kind": "patch",
"published_at": "2026-04-06T08:36:31Z"
},
{
"tag": "0.4.2",
"kind": "patch",
"published_at": "2026-04-05T21:25:20Z"
},
{
"tag": "0.4.1",
"kind": "patch",
"published_at": "2026-04-05T20:45:43Z"
},
{
"tag": "0.4.0",
"kind": "minor",
"published_at": "2026-04-05T18:27:24Z"
},
{
"tag": "0.3.6",
"kind": "patch",
"published_at": "2026-04-05T08:09:08Z"
},
{
"tag": "0.3.5",
"kind": "patch",
"published_at": "2026-04-04T22:46:18Z"
},
{
"tag": "0.3.4",
"kind": "patch",
"published_at": "2026-04-04T22:18:26Z"
},
{
"tag": "0.3.3",
"kind": "patch",
"published_at": "2026-04-04T21:07:08Z"
},
{
"tag": "0.3.2",
"kind": "patch",
"published_at": "2026-04-04T19:51:44Z"
},
{
"tag": "0.3.1",
"kind": "patch",
"published_at": "2026-04-04T18:57:55Z"
},
{
"tag": "0.3.0",
"kind": "minor",
"published_at": "2026-04-04T17:17:54Z"
},
{
"tag": "0.2.4",
"kind": "patch",
"published_at": "2026-04-04T07:54:20Z"
},
{
"tag": "0.2.3",
"kind": "patch",
"published_at": "2026-04-03T23:11:08Z"
},
{
"tag": "0.2.2",
"kind": "patch",
"published_at": "2026-04-03T21:59:24Z"
},
{
"tag": "0.2.0",
"kind": "minor",
"published_at": "2026-04-03T21:41:52Z"
},
{
"tag": "0.1.3",
"kind": "patch",
"published_at": "2026-04-03T19:57:19Z"
},
{
"tag": "0.1.2",
"kind": "patch",
"published_at": "2026-04-03T17:49:50Z"
},
{
"tag": "0.1.1",
"kind": "patch",
"published_at": "2026-04-03T17:38:45Z"
},
{
"tag": "0.1.0",
"kind": "minor",
"published_at": "2026-04-03T16:25:33Z"
}
],
"recent_commits": [
{
"oid": "f40b23c062ca083d7978dce251db9f306ff02a90",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-18T12:38:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "172064d6a3998e6eb23d3c01be86371b02df2037",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-16T16:34:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac42caa4994a6693df4cb4f2e6558d8e9da1a94a",
"body": "HasFluentRules now declares `public function rules(): array|RuleSet`. A request\nthat defines only schema() can call ->rules() and get the builder's output (the\nraw field map, the shape a hand-written rules() would return). A\nconsumer-defined rules() overrides it as usual; createDefaultValidator dete\n[…]\nture requirement (a rules() you define must be public and\nreturn array or RuleSet) in UPGRADING, and the capability in the README.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add a rules() fallback so schema-only requests answer ->rules()",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-16T15:48:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13d51ef6223076432d31fb50044d394611b43c62",
"body": "* chore(deps): bump actions/cache from 5 to 6\n\nBumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/\n[…]\nependabot[bot] <support@github.com>\n\n* chore: rector\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/cache from 5 to 6 (#19)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T15:09:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d69d6df9352a67815aab8bbaf513d637e85e430",
"body": "- The schema() intro now notes it can be defined alongside rules() (the\n two merge), not only in place of it.\n- Reflow the merge paragraph: fewer em dashes, no mechanical bold, and\n shorter sentences.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: clarify schema()/rules() compose, tighten the merge prose",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T11:43:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "252b7c56e765b698006ff3549feedbca3bceb728",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96135493a1859c96672b11041804ec81b7770c8f",
"body": "resolveSchemaOutranksRules()'s same-class branch now uses early returns\ninstead of a negated-boolean expression, dropping a redundant (bool) cast a\nRector rewrite had introduced. Behaviorally identical; clean under both\nRector and PHPStan.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify same-class tie precedence to early returns",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:25:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5afa9cc9e47af7dc2728095f47a5517db1bbb3c8",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbed21cb996d05d0d9dfa3a147a67b2dcbe1f167",
"body": "When a FormRequest declares both a FluentSchema-typed schema() and a rules()\n(anywhere in its class hierarchy), the two are now merged rather than schema()\nsilently shadowing rules(). The more-specific declaration wins each shared\nfield -- the deeper class in the hierarchy, or a body definition over\n[…]\n and adds a matrix covering both hierarchy directions, the trait/body\ntie-break, RuleSet returns, and parent::rules() composition.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Merge schema() and rules() instead of one shadowing the other",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:16:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "24914040f08eec46e50fb49f44a48d196c353f47",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:49:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de9b69f6a88b961358a4624a6b17bc7124b0606d",
"body": null,
"is_bot": false,
"headline": "Update composer.json",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:48:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87c6b3a24041ddfe25b2f74718c1a1805a198604",
"body": "…-validation",
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/SanderMuller/laravel-fluent…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:47:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df3889fbaed659d014d4cdd0195ad839987e65a3",
"body": null,
"is_bot": false,
"headline": "CS",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:47:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15f5bc2d79259f7fbcf1a4928c33645df655b010",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T21:24:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a8e7492e416901dc1b36009309907e0a3d853b6",
"body": "- README + boost skill: add the fifth optimization (rule-parse\n memoization) and bump the \"four optimizations\" references to five.\n- README: correct the Octane-safety note -- the factory resolver is\n never mutated (no try/finally swap in current code), and the parse\n cache is a bounded, pure memoization rather than \"no static state\".\n- Apply rector (toBe([]) -> toBeEmpty()) to the new copier test.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Document rule-parse memoization and correct the Octane-safety note",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T12:51:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5c2d7c2d6e80925f58ebed0f49ee5d3d46b9e588",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T12:36:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c171dc3c64fd269b9077c5d71c20f57c48e9e83b",
"body": "Memoize ValidationRuleParser::parse() of string rules in a worker-global\nstatic, collapsing the ~O(rules^2) re-parsing getRule() does per passes().\nByte-identical to vanilla; non-string rules bypass; soft-capped at 1024\nentries to bound long-lived Octane workers.\n\n- OptimizedValidator now extends Me\n[…]\n rules.\n\n~-48% on large homogeneous arrays, ~-21% on the conditional scenario, no\nregressions. Parity + regression tests included.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add MemoizingValidator for worker-global rule-parse memoization",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T12:35:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f033d16b5ebd67bd65ba38d1e3dd6c7fea12262",
"body": "…ook)",
"is_bot": false,
"headline": "Merge FluentSchema builder (RuleSet::define + schema() form-request h…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-25T21:36:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b2fa6f6f8201b88bd4c6cc7f219b419c287059",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-25T17:31:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdc8f58c26505cbeedc47d0af707b3a5ba22e653",
"body": "Instance-based mirror of the FluentRule static factory: receive one\n$rules builder and chain field starters off it instead of repeating the\nFluentRule:: prefix, matching the schema(JsonSchema) shape Laravel's AI\nSDK uses for structured output.\n\n- FluentSchema: 29 typed delegates to FluentRule (singl\n[…]\narding snapshots, precedence both ways,\n non-hijack, macro forwarding. FluentSchema at 100% line coverage.\n- README: schema() builder subsection, RuleSet::define entry point +\n method-reference row.",
"is_bot": false,
"headline": "Add FluentSchema builder + RuleSet::define / schema() form-request hook",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-25T17:29:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4fcf85fa32896af7985035593a38a25b7460c52",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 6 to 7 (#18)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-18T15:30:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0286fd0cc71296fdc4327b2c63138feccf2caed3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T15:25:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e97746eec6f3d347ed131b4859314760829be62",
"body": "…less\n\nFive conditional-validation fixes, all pinned to native Laravel by parity tests:\n\n- Object-form regex with a pipe: compiledRules() (and ItemRuleCompiler's\n tuple-strip join) no longer pipe-join when a token contains '|', so\n regex:/^(a|b)$/ survives instead of being split by Laravel's parse\n[…]\nlidator.\n\n- exclude reduction now evaluates every exclude_* condition on a field (not just\n the first) and no longer strips tuple-form required_if/required_unless when a\n field survives its exclude.",
"is_bot": false,
"headline": "Fix exclude_*/regex conditional edge cases and prune fluent excludeUn…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T14:45:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7ae109a41dd5aeb60c4387b9213b4bb516b61b07",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T12:47:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71f09e7b4bd3a75c5b6774da80d3aa2527b03ef1",
"body": "RuleSet: conditional rules written as FluentRule objects with a wildcard\ndependent path (e.g. requiredUnless('items.*.type', ...)) were mis-evaluated\nbecause the per-item prefix strip only handled array/string rule forms.\nrewriteRulesForPerItem now normalizes object rules to native form first, and\nm\n[…]\n, matching native Laravel instead of back-filling numeric\n indices.\n- normalizeRuleToArray strips the prefix on the whole compiled string rather\n than exploding on '|', which corrupted regex tokens.",
"is_bot": false,
"headline": "Fix object-form wildcard conditional deps and optimize FluentValidator",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T12:21:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9d3268ffa080deae127d0d803d0d378fbbc09a2",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T12:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "343dc5bcb219d2a34c775f1d1a3d401cec2a9d73",
"body": "A rule key containing '*' with no '.*' segment — the typo 'items*' (for\n'items.*'), or a root-level '*' / '*.foo' — computed an empty parent in\nRuleSet::separateRules() and was then silently dropped by\nvalidateWildcardGroups, so the rule applied NO validation and invalid data\npassed. separateRules()\n[…]\ny well-formed wildcard key contains '.*'.\n\nThe RuleSet class cognitive-complexity baseline rises 139->140 for the single\nconditional throw (irreducible for a guard; a sub-80 refactor is out of scope).",
"is_bot": false,
"headline": "fix: throw on malformed wildcard rule keys instead of silently skipping",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T11:38:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed99167166d92e583a253ea7e3b7d365c82dffea",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T11:15:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1c5df02580d5ee2562517f7e549efc9ceb27101",
"body": "… item path\n\nItemValidator's sibling-conditional branch (required_if / required_with /\npresence conditionals) recompiled fast-checks for every item, re-allocating\nwrapper closures even when many items reduce to the same effective rule set.\nMemoize them in $fastChecksByReduced, keyed by ruleCacheKey(\n[…]\nn an explicit isset() block so cognitive complexity stays\nat the baselined 49. Interleaved A/B benchmarking shows ~2-5% faster on the\nconditional-import scenario with no regression on untouched paths.",
"is_bot": false,
"headline": "perf: memoize buildFastChecks per reduced rule set in the conditional…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T11:05:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "983ba4ef6827a96b2d965f87cac2aebb07a2fc44",
"body": "Aggregates breaking/constraint changes and their migration steps in the\nconventional repo-root location. Documents the 1.28.0 Laravel 11 support\ndrop (constraint narrowed to ^12.0||^13.0) with both upgrade paths, links\nit from the README, and export-ignores it so it stays GitHub-only like\nCHANGELOG.md/CONTRIBUTING.md.",
"is_bot": false,
"headline": "docs: add UPGRADING.md with the 1.28 Laravel 11-drop upgrade guide",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T10:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9154fe8598e06807219c3f1425a9ec3728dd703",
"body": "laravel/pao gives agent-optimized output for pint/phpstan/rector/pest.\nLike the boost-skills / package-boost-laravel dev tooling it floors at\nphp ^8.3, so the run-tests matrix strips it for the php 8.2 legs (the\npackage itself still supports php ^8.2 at runtime).\n\n- require-dev: laravel/pao ^1.1\n- run-tests.yml: drop laravel/pao alongside the boost tooling before the\n matrix install so php 8.2 / Laravel 12 legs still resolve",
"is_bot": false,
"headline": "chore: add laravel/pao dev dependency",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T22:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0415680eeae197ce34e104bd395edf6046ae8d16",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T22:21:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17cf97636660f8a6abc65b8ec1d73a53226cc29e",
"body": "Every Laravel 11 release (v11.0.0..v11.54.0) is flagged by Packagist\nsecurity advisories with no advisory-free patch in the 11.x line, so\nComposer's advisory policy refuses to install it — the L11 CI legs can\nno longer resolve. Laravel 11 is past security support; dropping it.\n\n- illuminate/* constr\n[…]\n.0 -> ^12.0||^13.0\n- orchestra/testbench: ^9.0||^10.11 -> ^10.11 (testbench 9 is L11-only)\n- run-tests.yml: remove the L11.* matrix leg + testbench 9.* include\n- README: \"Laravel 11+\" -> \"Laravel 12+\"",
"is_bot": false,
"headline": "fix: drop Laravel 11 support (advisory-blocked, past security support)",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T22:15:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ebf502c0631358f8b6f642dcb53f6ed48e6cbfb8",
"body": "- Bump sandermuller/package-boost-laravel ^0.11.0 -> ^1.0 (pulls\n boost-core 1.x + package-boost-php 1.x transitively)\n- Bump sandermuller/boost-skills ^2.0 -> ^2.5 (first version allowing\n boost-core ^1.0; required so prefer-lowest CI resolves)\n- .config/boost.php: wrap withTags() args in an arra\n[…]\ndrop redundant @var override; PHPStan now\n infers the precise list<decimal-int-string> for the regex captures\n- Regenerate AGENTS.md/CLAUDE.md/.gitignore via boost sync (boost-skills\n 2.5.0 content)",
"is_bot": false,
"headline": "chore: upgrade boost family to v1",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T21:12:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09049f715cf2023d9f7410948559f75aae47983a",
"body": "boost-core 0.18.1 resolves .config/boost.php ahead of root boost.php.\nMove the config there; boost-core relocates its runtime manifest to\n.config/boost/manifest.json and updates the managed .gitignore block.\nAdd .config/ export-ignore so the dev config stays out of the Composer\narchive (the old root boost.php was shipping), and update CONTRIBUTING\npath references.",
"is_bot": false,
"headline": "chore: move boost.php to .config/ using boost-core .config support",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T20:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fca8dad5d940d8701b56e3921b3e9d90b718cc1",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T20:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db314676416304edcbd9e569d05108f884db5c26",
"body": "core.blade.php was plain markdown with zero Blade directives; the\n.blade.php extension made boost-core skip it on every consumer with\n'no renderer registered for its extension'. The always-on FluentRule\nguidance never reached consumers' CLAUDE.md/AGENTS.md. Rename to .md\nso boost-core renders it natively. No content change.",
"is_bot": false,
"headline": "fix: rename core guideline to .md so boost-core renders it for consumers",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T19:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f002af816513f53d2036f23837162b06b7f265c",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T13:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d17504911517456ec7f42b00f637bd93bba20cdc",
"body": "…h nullable()\n\nWhen a FluentRule self-validates (used as a standalone ValidationRule, e.g. inline `$request->validate([...])` without HasFluentRules), a null or absent value short-circuited validation whenever `nullable` was present and the literal `required` string was absent. That silently dropped\n[…]\nted each()/children() rules, so a required child under a null nullable parent is enforced like native Laravel instead of skipped.\n\nSupersedes #15 (broader than the required-only patch proposed there).",
"is_bot": false,
"headline": "fix: enforce conditional-required and presence modifiers combined wit…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T12:57:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3727dc8cefc1e886fa4c7683f9dc5dd76025f9bb",
"body": "…avel ^0.11.0\n\nBump the boost dev dependencies and regenerate the managed boost artefacts (boost.php, .gitignore boost block, AGENTS.md, CLAUDE.md) via `boost sync`. Dev-only; no runtime or public-API change.",
"is_bot": false,
"headline": "chore: upgrade boost tooling to boost-skills ^2.0 + package-boost-lar…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T12:57:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a21f47e83bdd75aacb8ae387b14d67229e5fb26d",
"body": "Newer larastan 3.10 / phpstan 2.2 / pest 4.7 (resolved fresh in CI — no\ncommitted lock) report findings that predate main's last green run:\n\n- FastCheckParityTest: assert($closure instanceof Closure) after the\n not-fast-checkable skip guard. markTestSkipped() no longer narrows the\n Closure|null in\n[…]\nsing-class-context analysis, so it is baselined\n against the test file.\n\nPre-existing on main (fails identically there); surfaced by this branch's\nfresh CI resolve, not caused by the boost migration.",
"is_bot": false,
"headline": "fix: resolve PHPStan findings from upstream dependency drift",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-31T09:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "276733e55a9721b7835188ce75b44c59b341a3d0",
"body": "package-boost-laravel + boost-core floor at php ^8.3 / illuminate ^12||^13,\nbut this package supports php 8.2 and Laravel 11. The authoring tooling is\nnot needed to run the suite, so remove it before the matrix resolve to keep\nthe php 8.2 and Laravel 11 legs installable.\n\nCaught by codex review of the boost-engine migration (the prior\nsandermuller/package-boost 0.15 floored at php ^8.2 / illuminate ^11, so the\nmatrix was green before the swap).",
"is_bot": false,
"headline": "fix(ci): drop AI authoring tooling from the test matrix",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-31T08:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d6365fa05fd0b44364686523f3d14edb01b31c5",
"body": "Replace abandoned sandermuller/package-boost with the split engine:\nboost-skills (catalog) + package-boost-laravel (boost-core). Drop\nlaravel/boost — its MCP server was unused.\n\n- boost.php: allowlist boost-skills + package-boost-{laravel,php} +\n stolt/lean-package-validator; tags Php/Laravel/Githu\n[…]\ne dead .mcp.json + .codex/config.toml (boost:mcp gone with laravel/boost)\n- Strip stale old-engine guideline blocks from CLAUDE.md/AGENTS.md\n- Rewrite CONTRIBUTING.md for the vendor/bin/boost workflow",
"is_bot": false,
"headline": "chore: migrate AI tooling to boost-skills + package-boost-laravel",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-31T07:59:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f1edcb01a2b2a5006a30826284e6e02912beeab",
"body": "- composer.json: sync-ai updated to vendor/bin/boost sync\n- Regenerated AGENTS.md / CLAUDE.md from package-boost 0.15.1",
"is_bot": false,
"headline": "Resync AI tooling — pull package-boost 0.15.1 (boost sync command refs)",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-18T06:51:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3643778b68f74db6df122021927a7bb669fab2ea",
"body": "The 1.27.1 fix proved itself via tests/BatchValidationGuardsTest, which\nasserts Validator::failed() shape directly. Add a tester-surface test\nthat drives the exact consumer scenario downstream adopters reported:\nFluentRulesTester::for(FormRequest)->with(bulk payload)->failsWith($f,\n'max') on a FormRequest whose each() carries a batched exists rule and\nwhose parent declares max:N. Confirmed bug-catching — fails with the\nexact \"Failed rules: []\" symptom when the BatchLimitRemap fix is removed.",
"is_bot": false,
"headline": "test: add FluentRulesTester regression test for parent-max remap path",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T21:04:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c6f52b08ce550056d830c219f1c7be4acb7a796",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T20:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22852458937411a657f3b244f8d213ad061f1a12",
"body": "The parent-max guard in HasFluentRules fires before the validator is\nbuilt, so the remap from BatchLimitExceededException to\nValidationException produced a synthetic Validator whose failedRules\nstayed empty. Errors bag carried the message, but Validator::failed()\nreturned [] — silently breaking FluentRulesTester::failsWith($f, 'max')\nand any other rule-bag inspection path. Remap now reflects failedRules\nwith Max (parent-max) or BatchLimit (hard-cap) keyed by attribute.",
"is_bot": false,
"headline": "fix: populate Validator::failed() on parent-max batch short-circuit",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T20:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "212db0de49e82b89fead04d6960019278706c9bd",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T15:09:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b36e048f6abdb10a4e21f59080e0c5d8525f9475",
"body": "dropUnknownFields() is the lenient counterpart to failOnUnknownFields():\nstrips unvalidated nested array sub-keys (children(), each(), dotted\nrule keys) from validated() output instead of erroring. Maps to\nLaravel's Validator::$excludeUnvalidatedArrayKeys; per-RuleSet override\nof host factory state.\n[…]\nloadedFile was\nalready referenced). Pest @phpstan-ignore identifier renamed\n(pest.impossibleExpectation → pest.expectation.impossible).\nRector AppToResolveRector cleanup on three unrelated test files.",
"is_bot": false,
"headline": "feat: add dropUnknownFields() + Request overload on validate()/check()",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T14:27:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2bd5baa41d0f860d2754f6e63d9b1b31af35be92",
"body": "…parser\n\nMaintainability pass before next rule additions land. Internal-only — no\npublic API change, no behaviour change. 2705 tests pass, Login form\nbenchmark 12x preserved.\n\n- Extract AbstractConditionalReducer; PresenceConditional + ValueConditional\n reducers now share apply-template + hasAny + \n[…]\node, new home).\n- Extend tests/ phpstan ignore block with new.internalClass /\n staticMethod.internalClass / staticMethod.internal so direct unit tests\n can instantiate first-party @internal classes.",
"is_bot": false,
"headline": "refactor: dedup reducers, decompose validator phase, unify FastCheck …",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T17:09:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "45323d0726b6ee1b2e01533a739b9806a5bebe0e",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:57:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f57256bcb952a0513cc06a880df5d8bede4f11ac",
"body": "The bot's chore: rector commit (a91a2f9) ran a narrower Rector config\nthan the local one. Re-run to converge and add the trailing blank\nlines after the early-return continues.",
"is_bot": false,
"headline": "style: re-apply Rector NewlineAfterStatementRector",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:42:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "912a74a52efb9d3cdb1f326dc6a0060d942e16f0",
"body": "The FastCheckCompiler::compile() static cache (commit 494e4ad,\nnarrowed by e3af13c) doubled the relative speedup on the flat-rule\npath by skipping closure recompilation for stable rule strings on\nrepeat FormRequest validations. Wildcard scenarios were already\nhitting per-rule caches upstream and didn't move; this row was the\nonly stale benchmark figure.",
"is_bot": false,
"headline": "docs: update Login form benchmark — 7x → 12x from compile cache",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a91a2f9ea920e58624f1bf85cfc26ed484ec246e",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3af13cd7f94e0b9d722b2b14c086369d0b47bed",
"body": "CoreValueCompiler resolves strtotime() at compile time and bakes the\ntimestamp into the returned closure. Caching that closure across Octane\nrequests would freeze relative tokens (today/now/tomorrow/+1 week/etc)\nfor the lifetime of the worker, silently drifting validation after\nmidnight or as time a\n[…]\nest.php (7 cases): the stable-\nrule reuse contract and the no-reuse contract for the five date-\ncomparison opcodes plus an absolute-date variant.\n\nCaught by codex adversarial review of commit 494e4ad.",
"is_bot": false,
"headline": "fix: skip FastCheckCompiler::compile() cache for date-comparison rules",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:27:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f9fba6df9449e21e1f0b4b2f0eb659f7004ce12",
"body": "- Drop redundant (bool) cast in OptimizedValidator::tryFastCheckRemaining\n — closure return type already declares bool.\n- Tighten PHPDoc on FastCheckCompiler::$compileCache from the ambiguous\n Closure(mixed): bool|null to ?Closure(mixed): bool.\n- Drop now-stale OptimizedValidator::passes() cognitive-complexity\n baseline entry — the helper extraction in 0cb5356 brought it under\n threshold.",
"is_bot": false,
"headline": "chore: polish from self-evaluate pass",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:27:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cb5356495ddac8199fac2a30f0261e5f3cb4745",
"body": "Phase 2 used to call evaluateConditionals() on EVERY attribute in the\nrules map, doing a full foreach search for exclude_unless/exclude_if\ntuples even when the attribute had none. For FormRequests with sparse\nconditionals over many attributes that scan was the dominant per-call\ncost.\n\nReplace it wit\n[…]\n 13–16ms\n after: median ~10ms (~30% faster)\n\nBench harness scenarios (RuleSet::validate path) unchanged — they\ndon't route through OptimizedValidator. PHPStan clean, full suite\npassing (2660 tests).",
"is_bot": false,
"headline": "perf: pre-extract conditional metadata in OptimizedValidator::passes()",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T13:54:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19df5e2920b70e105683aaee3c72159ded5c7740",
"body": "Three micro-cleanups in the per-item validation loop. None move the\nbenchmark needle individually (variance dominates), but they match\nexisting intent and avoid pointless work on every call:\n\n- CoreValueCompiler: replace `in_array($value, [null, '', []], true)`\n with explicit `===` chain. The adjac\n[…]\nthe fast-check\n map to passesAllFastChecks. The collector iterates values via\n foreach, so the rekey was free busywork on every item.\n- ItemErrorCollector: widen the param type to iterable to match.",
"is_bot": false,
"headline": "refactor: drop dead work in fast-check hot path",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T13:06:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b35707b6aa42be3f62fc231f044c6fceebc4514f",
"body": null,
"is_bot": false,
"headline": "Update getEachRules to return array only",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:49:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0938515e9dc06f71ba94231fd43468ca9581c04d",
"body": null,
"is_bot": false,
"headline": "Update ImportBenchTest.php",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:49:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60600db5107bcb1feeda8b81eb2f0fbbc8ecf4d8",
"body": null,
"is_bot": false,
"headline": "Update RuleSet.php",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "068977da03524abdc101bb0ff96a3c3a2ea93816",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:48:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b0fd209b03d6f1b6dc0cc62c3845ed9c377d9bb",
"body": null,
"is_bot": false,
"headline": "Update SKILL.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "494e4adf4d18ed9bc020221d59d212de703dd53b",
"body": "Repeated FormRequest validations recompile the same pipe-delimited rule\nstrings into the same closures. Adding a static map keyed by rule\nstring roughly doubles the speedup on flat-rule paths (Login-form\nbenchmark: 6.6x -> 12x vs native Laravel) with no measurable regression\non wildcard or conditional benchmarks (those already hit the per-item\nRuleCacheKey upstream).\n\nMemory cost is bounded by the set of distinct rule strings the process\never sees, which is small in typical apps.",
"is_bot": false,
"headline": "perf: cache FastCheckCompiler::compile() closures by rule string",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:42:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16c2cd126e6b68c22a7659e953f41c3ed5efd4f2",
"body": "- Limit `package-boost.agents` to claude_code, cursor, copilot\n to avoid generating gemini/junie/kiro/.agents/ artefacts.\n- Drop legacy `.github/copilot-instructions.md` (Copilot now reads\n AGENTS.md per package-boost 0.14).\n- Sync regenerated AGENTS.md/CLAUDE.md guidelines block, .gitattributes\n managed export-ignores, and new vendor skill symlinks\n (lean-dist, readme, release-notes, skill-authoring, upgrading).\n- Gitignore unused agent dirs as a safety net.",
"is_bot": false,
"headline": "chore: upgrade package-boost to ^0.14.0",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-08T15:28:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3081f96dab2a296e0e7929aa4f91764aa1a29776",
"body": null,
"is_bot": false,
"headline": "chore(deps-dev): bump sandermuller/package-boost to ^0.13.0",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-08T14:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cb80ecdfdeb79cda5a60768a40e3fbb11ba3b85",
"body": null,
"is_bot": false,
"headline": "Trim Boost skill descriptions",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-08T14:38:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ad1a2dc6dd39783097efc52b9c471b3cd9f502",
"body": "Updates the requirements on [sandermuller/package-boost](https://github.com/sandermuller/package-boost) to permit the latest version.\n- [Release notes](https://github.com/sandermuller/package-boost/releases)\n- [Changelog](https://github.com/SanderMuller/package-boost/blob/main/CHANGELOG.md)\n- [Commi\n[…]\ndency-version: 0.12.0\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): update sandermuller/package-boost requirement (#14)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-07T21:29:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8b8ddcdaf0a9e0e58089d7ae7376f8d591b22010",
"body": null,
"is_bot": false,
"headline": "Update .gitattributes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-30T08:37:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c5d34fa4c795d2d52fa733f74f9ea09cfd9e776",
"body": null,
"is_bot": false,
"headline": "Update CONTRIBUTING.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T15:23:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff7350edaf33d397dc9e8b771f226a5d1f2150b3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T15:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dd6efd96c394a54e5b469aa7d5fcd5d0d48ccb0",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T15:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84a0482d7d2e2c1087a9048165f51a203797793",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:44:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78516b16250705c2a1b2d24c811ce9f8bf0019d1",
"body": "ValueTypePredicates::predicateFor() collapsed `integer:strict` to bare\n`integer` via the colon-split, then mapped both to a `filter_var(...,\nFILTER_VALIDATE_INT)` predicate. That meant numeric strings like \"42\"\nsurvived BatchDatabaseChecker::filterValuesByType() and entered the\nbatched whereIn group\n[…]\nnumeric strings under\n`integer:strict`, keeping only true ints. Plus a CoreValueCompiler\nclosure-level test pinning fast-check behavior across versions\n(`is_int` under strict, `filter_var` otherwise).",
"is_bot": false,
"headline": "fix: integer:strict bypassed batch type filter",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:43:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "afbc373661aaf15565a7f565121d6f230384877e",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:05:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "679f2994384f401f5c9a8937546d0a31e8cb3a8e",
"body": "….23+\n\nTwo issues caught by the prefer-lowest matrix:\n\n1. Fast-check shortcut. CoreValueCompiler collapsed `integer:strict` to\n `'integer' => true`, then emitted a `filter_var(..., FILTER_VALIDATE_INT)`\n closure that accepted numeric strings. With FluentRule on the optimized\n entry points (Has\n[…]\ns when reflection shows strict isn't honored.\n\nREADME + migration-patterns now note the L12.23+ requirement on the strict row.\nPHPStan baseline bumped 118 → 120 for CoreValueCompiler class complexity.",
"is_bot": false,
"headline": "fix: integer:strict honored on optimized path; gate live tests to L12…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:04:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "01b8564cc73d6beefafab09fb615885c96d1c487",
"body": "- Restructure Usage to lead with FormRequest; bare validate() demoted to a smaller \"Other contexts\" subsection at the end.\n- Why-this-package gains Fluent / Array notation / Messages & attributes / Performance subsections; intro example replaced with the harder-to-remember pain points (min:5 polymor\n[…]\nomment uses kept.\n- TOC sub-links into <details> blocks removed (anchors don't reliably resolve inside collapsibles).\n- migration-patterns.md adds the integer:strict mapping in the type-choice matrix.",
"is_bot": false,
"headline": "docs: 1.25 README pass + migration-patterns refresh",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T13:35:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db5eb0d16b18a80f2b2acae8af7c2fb91e1db46c",
"body": "- FluentRule::integer() accepts strict: true to reject numeric strings (\"42\"); positional (label, message) signature preserved (BC-safe).\n- FluentRule::date() and ::dateTime() now accept message: to mirror ::string(message:); writes to customMessages['date'] (or 'date_format' once format() runs).\n- \n[…]\ncException for chained ->message() before any rule (fail-fast guard preserved).\n- DateRule::format() migrates a pinned 'date' message to 'date_format'; an explicit messageFor('date_format', ...) wins.",
"is_bot": false,
"headline": "feat: factory message: on date/dateTime, strict: on integer",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T13:34:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6ccaa10a54657b629dbdf931577211fbbf8df27",
"body": "* dist: Update export-ignores\n\n* Keep LICENSE.md and README.md in dist tarball\n\n---------\n\nCo-authored-by: Sander Muller <github@scode.nl>",
"is_bot": false,
"headline": "dist: Update export-ignores (#13)",
"author_name": "Raphael Stolt",
"author_login": "raphaelstolt",
"committed_at": "2026-04-28T19:52:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70049807123782bc987af369b8b97e51f075d79a",
"body": "… imports\n\n- Split BatchDatabaseChecker: query runner -> Internal\\BatchPresenceQuery,\n type-predicate derivation -> Internal\\ValueTypePredicates.\n- Adopt Rector withImportNames() + typeDeclarationDocblocks; replace inline\n \\Closure / \\Stringable / \\Throwable references with use statements.\n- Restore spaces in Closure(...) docblock return types where phpdoc-parser's\n printer had stripped them.",
"is_bot": false,
"headline": "refactor: extract BatchPresenceQuery + ValueTypePredicates, normalize…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bbfde4757f3d93f02deb0b81a4ff58e23159c43",
"body": null,
"is_bot": false,
"headline": "Rename skills",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "740c885414d273b1e64bad56a33094232a630452",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:21:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9c2e894beea25205b43efc5f2df679fe5332ef3",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:17:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5abb9a88eb5d32eb4797e1058349818e247530a",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:16:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5927e28f37fb67d8d3397fc6d4326969165b7dd1",
"body": "`dev-master` aliases to the next-major dev branch (currently Laravel\n14). Our composer.json supports `^11 || ^12 || ^13` only — we don't\nclaim Laravel 14 support, so regressions on 14's dev branch are noise\nnot signal.\n\nSwitching the nightly to `laravel/framework:13.x-dev` keeps\nearly-warning covera\n[…]\nrk#59781 added\nthem as abstract methods on the contract without backporting the\nconcrete implementations from #59756. Upstream's to fix on their\nside; not ours to chase for a version we don't support.",
"is_bot": false,
"headline": "ci: target 13.x-dev nightly instead of dev-master (Laravel 14)",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T07:15:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c7964dc881c3f0a7da4fe3e5e82362d3c561424",
"body": "Release notes are public artefacts (GitHub release body → CHANGELOG.md\nvia CI → Packagist). Internal peer IDs, claude-peers channel framing,\nand agent-session process notes leak internal architecture and add\nzero value for downstream consumers. Step 8 of the skill now codifies:\n\n- Do not write peer \n[…]\nadmap.md + specs/*.md\n can still reference peers (gitignored, session-continuity only).\n- Pre-`Write` scrub checklist: grep for `peer`, 8-char IDs, and\n \"claude-peers\" / \"claude-code\" before saving.",
"is_bot": false,
"headline": "docs: pre-release skill forbids peer mentions in release notes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T07:05:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "494fad7236d73ebf784846d1c9aa36e4a163ac96",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T06:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9dc7a189bd092c91867a0a60bc625ca2d2ae104",
"body": "Phase 4 of `each-children-extend-helpers` — scoped after hihaho's\nadoption report on 1.23.0 confirmed one real extend site and zero\n`getEachRules()` callers post-migration.\n\nTwo new RuleSet methods:\n\n- `RuleSet::modifyEach(string $field, array $rules): self` — wraps\n `modify($field, fn ($r) => $r->\n[…]\nr stays verified through 1.25.0.\n\nNo API breaks. No behaviour change to `each()` / `children()`.\n`addEachRule` / `mergeEachRules` / `addChildRule` / `mergeChildRules`\nprimitives from 1.23.0 unchanged.",
"is_bot": false,
"headline": "feat: RuleSet::modifyEach / modifyChildren sugar + narrow each-getters",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T06:38:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8996c2cb9e41e074d4539c1429d2016e26285ff6",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:46:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c8393f0c9293c2482009c28883a1b0cb6151dc0",
"body": "… array_merge in loops\n\nThree independent improvements that land together for 1.23.0:\n\n1. Internal cleanup on HasFluentValidation's FluentRule path:\n - `RuleSet::isEmpty()` + `hasObjectRules()` helpers absorb the\n inline duplicated \"does this array have any FluentRule objects?\"\n scans that\n[…]\nDateRule`, `DeclinedRule`, `EmailRule`, `FileRule`,\n`NumericRule`, `PasswordRule`, `StringRule`) from an earlier Pint pass\nride along.\n\nBug fix #2 surfaced via Codex review of the 1.23.0 working tree.",
"is_bot": false,
"headline": "refactor + fix: RuleSet helpers, compileFluentRules empty-array path,…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:26:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f991f30f76f26fc8b1e4e6fbae46144a6aa091f3",
"body": "Adds four helpers for the subclass-extends-parent FormRequest pattern:\n\n- `ArrayRule::addEachRule(string $key, ValidationRule $rule)`\n- `ArrayRule::mergeEachRules(array $rules)` (later-wins merge)\n- `FieldRule::addChildRule(string $key, ValidationRule $rule)`\n- `FieldRule::mergeChildRules(array $rul\n[…]\ncrete\n`parent::rules()->modify(KEY, fn ($r) => $r->addEachRule(...))` end-to-end\ntest matching the hihaho dogfood pattern that sourced this feature.\n\nSourced from hihaho migration feedback 2026-04-23.",
"is_bot": false,
"headline": "feat: add extend-parent helpers for each() and children() shapes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:25:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd95794ff5bdee1363b96d74236b5670b1893f80",
"body": "Adds `ValueConditionalReducer` alongside the existing presence-conditional\nreducer, covering `required_if` / `required_unless` / `prohibited_if` /\n`prohibited_unless`. For wildcard items, the reducer rewrites active\nrules to bare `required` / `prohibited` (unlocking fast-check) and drops\ninactive ru\n[…]\nired|exists:users,id` vs just `exists:users,id`) would reuse the\nfirst item's immutable `Validator`. Cache keys now include rule content\nfor string rules and a stable fingerprint for non-string rules.",
"is_bot": false,
"headline": "feat: pre-evaluate value-conditional rules per-item",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:24:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3978cab0d6db3d1b7987d2260b2b511adaf70c6a",
"body": "Three gaps surfaced by a post-1.22 coverage audit:\n\n- FluentRule::activeUrl() factory lacked a standalone happy/unhappy\n validation test — the factory shortcut bypasses the string()->activeUrl()\n chain that was the only path tested.\n- Factory-level inline message: parameter was only covered by liv\n[…]\n guards are\n designed for. Adds a 50k-unique-int hostile payload test with\n wall-clock (<2s) and memory-delta (<64MB) budgets to catch quadratic\n regressions in the filter -> dedup -> cap pipeline.",
"is_bot": false,
"headline": "test: close coverage gaps across 1.19-1.22 releases",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T14:15:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c0ba3b80ebe09689525f80d2ecab0f8b9ffecbfa",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T13:55:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d81afbece77740ab558c69aaa529984d9a2538b9",
"body": null,
"is_bot": false,
"headline": "chore: pint",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:55:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9f978989be2d01f3a2f96849b6ce5d9cd35c11d",
"body": null,
"is_bot": false,
"headline": "chore: sync boost skills + guidelines",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "155c696b6b82cc8a27e53791748430e4e472205e",
"body": "Three layered safeguards close the gap where BatchDatabaseChecker pre-populates\nraw values before per-item rules run, turning what should be a validation-time\nrejection into unbounded DB work (or a PostgreSQL crash on bad types):\n\n- Parent max:N short-circuit on the FormRequest path. For each concre\n[…]\natchLimitExceededException\npre-remap when consumers construct validators directly from $ruleSet->prepare();\nthrough the documented entry points the exception is always remapped to\nValidationException.",
"is_bot": false,
"headline": "feat: guard batched DB validation against DoS + strict-DB crashes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:40:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f106b179605ab94d6c0e6fd6e65a46ce9efa308e",
"body": "…tion",
"is_bot": false,
"headline": "docs: link companion PHPStan rules package for unbounded each() detec…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:39:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c364f433daa42eab975385a60edb0d523eba2b3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-22T19:06:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ccb29de33d48c9221a09d87690fa67bc8ef0ae",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-22T18:57:10Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 78,
"commits_last_year": 541,
"latest_release_at": "2026-07-16T16:34:20Z",
"latest_release_tag": "1.33.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 27,
"days_since_latest_release": 5,
"mean_days_between_releases": 4.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "sandermuller/laravel-fluent-validation",
"exists": true,
"license": "MIT",
"keywords": [
"fluent",
"validation",
"laravel",
"rule-builder"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/sandermuller/laravel-fluent-validation",
"is_deprecated": false,
"latest_version": "1.33.0",
"repository_url": "https://github.com/SanderMuller/laravel-fluent-validation",
"versions_count": 79,
"total_downloads": 24354,
"dependents_count": 2,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 9636,
"first_published_at": null,
"latest_published_at": "2026-07-16T15:48:22Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 2,
"stars": 211,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": {
"days": [
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-06",
"count": 1
},
{
"date": "2026-04-08",
"count": 9
},
{
"date": "2026-04-09",
"count": 7
},
{
"date": "2026-04-10",
"count": 9
},
{
"date": "2026-04-11",
"count": 4
},
{
"date": "2026-04-12",
"count": 11
},
{
"date": "2026-04-13",
"count": 11
},
{
"date": "2026-04-14",
"count": 6
},
{
"date": "2026-04-15",
"count": 6
},
{
"date": "2026-04-16",
"count": 3
},
{
"date": "2026-04-17",
"count": 9
},
{
"date": "2026-04-18",
"count": 3
},
{
"date": "2026-04-20",
"count": 2
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-23",
"count": 2
},
{
"date": "2026-04-27",
"count": 47
},
{
"date": "2026-04-28",
"count": 18
},
{
"date": "2026-04-29",
"count": 11
},
{
"date": "2026-04-30",
"count": 3
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 2
},
{
"date": "2026-05-03",
"count": 3
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-10",
"count": 1
},
{
"date": "2026-05-11",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-18",
"count": 1
},
{
"date": "2026-05-26",
"count": 8
},
{
"date": "2026-05-27",
"count": 3
},
{
"date": "2026-05-28",
"count": 2
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-05-30",
"count": 2
},
{
"date": "2026-06-02",
"count": 2
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-08",
"count": 2
},
{
"date": "2026-06-12",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-06-24",
"count": 2
},
{
"date": "2026-06-30",
"count": 2
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-13",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 211,
"total_stars": 211
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 105804,
"source_files_sampled": 158,
"oversized_source_files": 2,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 13555
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"assessed_package": null,
"unassessed_count": 28,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "illuminate/contracts",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
},
{
"name": "illuminate/http",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
},
{
"name": "illuminate/support",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
},
{
"name": "illuminate/validation",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "illuminate/contracts",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "illuminate/http",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "illuminate/support",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "illuminate/validation",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "driftingly/rector-laravel",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "larastan/larastan",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "laravel/pao",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "laravel/pint",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "livewire/livewire",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "mrpunyapal/rector-pest",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "nunomaduro/collision",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "orchestra/testbench",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "pestphp/pest",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "pestphp/pest-plugin-arch",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "pestphp/pest-plugin-laravel",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/extension-installer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-deprecation-rules",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-strict-rules",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "rector/rector",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "rector/type-perfect",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "sandermuller/boost-skills",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "sandermuller/package-boost-laravel",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "spaze/phpstan-disallowed-calls",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symplify/phpstan-extensions",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "tomasvotruba/cognitive-complexity",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "tomasvotruba/type-coverage",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 28,
"direct_count": 4,
"indirect_count": 24
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 11,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 5
},
"bus_factor": 2,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "SanderMuller",
"commits": 488,
"avatar_url": "https://avatars.githubusercontent.com/u/9074391?v=4"
},
{
"type": "User",
"login": "freekmurze",
"commits": 388,
"avatar_url": "https://avatars.githubusercontent.com/u/483853?v=4"
},
{
"type": "User",
"login": "mvdnbrk",
"commits": 46,
"avatar_url": "https://avatars.githubusercontent.com/u/802681?v=4"
},
{
"type": "User",
"login": "Nielsvanpach",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/10651054?v=4"
},
{
"type": "User",
"login": "pforret",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/474312?v=4"
},
{
"type": "User",
"login": "sebastiandedeyne",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/1561079?v=4"
},
{
"type": "User",
"login": "AlexVanderbist",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/6287961?v=4"
},
{
"type": "User",
"login": "patinthehat",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/5508707?v=4"
},
{
"type": "User",
"login": "riasvdv",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/3626559?v=4"
},
{
"type": "User",
"login": "AdrianMrn",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/12762044?v=4"
}
],
"contributors_sampled": 98,
"top_contributor_share": 0.423
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"benchmark-comment.yml",
"benchmark.yml",
"fix-php-code-style-issues.yml",
"laravel-13-dev.yml",
"phpstan.yml",
"rector.yml",
"release-benchmark.yml",
"run-tests.yml",
"update-changelog.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/28 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 17 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f40b23c062ca083d7978dce251db9f306ff02a90",
"ran_at": "2026-07-21T20:18:59Z",
"aggregate_score": 6.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/SanderMuller/laravel-fluent-validation",
"host": "github.com",
"name": "laravel-fluent-validation",
"owner": "SanderMuller"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"security": 61,
"vitality": 90,
"community": 54,
"governance": 72,
"engineering": 60
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 90,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"commits_last_year": 541,
"human_commit_share": 0.97,
"days_since_last_push": 3,
"active_weeks_last_year": 27
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "27/52 weeks with commits",
"points": 18.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 27
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "541 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 541
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 78,
"latest_release_tag": "1.33.0",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 4.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "78 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 78
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 54,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"forks": 2,
"stars": 211,
"watchers": 2,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "211 stars",
"points": 37.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 211
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"packages": [
"sandermuller/laravel-fluent-validation"
],
"dependents": 2,
"ecosystems": "packagist",
"total_downloads": 24354,
"monthly_downloads": 9636
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "9,636 downloads/month across packagist",
"points": 53.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 9636,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "2 packages depend on it",
"points": 3.2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 2
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 72,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 98,
"top_contributor_share": 0.423
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 42% of commits",
"points": 13,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 42
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "98 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 98
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 11,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "11/16 decided PRs merged",
"points": 26.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 11,
"decided": 16
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"followers": 50,
"owner_type": "User",
"is_verified": null,
"owner_login": "SanderMuller",
"public_repos": 68,
"account_age_days": 4304
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "50 followers of SanderMuller",
"points": 12.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 50,
"login": "SanderMuller"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "68 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 68
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"sandermuller/laravel-fluent-validation"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "79 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 79
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 61,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 6.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 19
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.629,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 13555
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "61 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 33.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 61,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.06,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.03
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "6 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "3 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 105804,
"source_files_sampled": 158,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/158 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 158,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-21T20:19:17.200147Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/SanderMuller/laravel-fluent-validation.svg",
"full_name": "SanderMuller/laravel-fluent-validation",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit SanderMuller/laravel-fluent-validation teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.23.0 — vollständige Methodik · Metriken-Wiki.
