Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-25 04:54 UTC

apmantza / pi-free

All-in-one free/freemium/paid model providers for Pi

TypeScriptMIT★ 80 Sterne⑂ 12 Forksseit März 2026Auf GitHub ansehen ↗

apmantza/pi-free erreicht einen Gesundheitsindex von 68 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (86/100) ab, am schwächsten bei Community & Adoption (55/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

68
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

68
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Apostolos MantzarisPersönliches Konto
10 Follower12 öffentliche Reposseit Dez. 2025

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlichtTags
npmpi-free2.2.82.74236vor 5 Tagenpi-packagepi-extensionfree-modelspaid-modelsmodel-filternvidia-nimkiloclinezenmuxcrofaiollama-cloud

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

86Exzellent · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
13.2/36Commit-Rhythmus — 19/52 Wochen mit Commits
18/18Commit-Volumen — 590 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year590
human_commit_share0,94
days_since_last_push0
active_weeks_last_year19

Release-Disziplin

100Exzellent
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 9 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 3 Tagen
27/27Release-Rhythmus — ein Release etwa alle 4,6 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count9
latest_release_tagv2.2.8
releases_from_tagsnein
days_since_latest_release3
mean_days_between_releases4,6
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

55Mittel · 18 % des Gesamtindex
Wie die Bewertung erfolgt
30.8/60Stars — 80 Stars
8.7/25Forks — 12 Forks
0/15Watcher — 1 Watcher
Verwendete Eingangsdaten
forks12
stars80
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (MIT)
18/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein
Wie die Bewertung erfolgt
45.8/80Downloads pro Monat — 2.742 Downloads/Monat über npm
0/20Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen
Verwendete Eingangsdaten
packagespi-free
dependents
ecosystemsnpm
total_downloads
monthly_downloads2.742
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

58Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
10.6/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 53 % der Commits
8.1/13.5Breite der Beitragenden — 6 Beitragende
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Verwendete Eingangsdaten
bus_factor1
contributors_sampled6
top_contributor_share0,529
Wie die Bewertung erfolgt
46.8/46.8Issue-Lösungsquote — 100 % der Issues geschlossen
36.4/38.3PR-Annahme — 294/309 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 1/13 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs294
open_issues0
closed_issues32
issue_closed_ratio1
closed_unmerged_prs15
Wie die Bewertung erfolgt
10/30Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20Verifizierte Domain — für Nutzerkonten nicht anwendbar
7.5/25Reichweite des Inhabers — 10 Follower von apmantza
9.4/25Kontohistorie — 12 öffentliche Repos, Kontoalter ca. 0 Jahre
Verwendete Eingangsdaten
followers10
owner_typeUser
is_verified
owner_loginapmantza
public_repos12
account_age_days234
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf npm
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen
20/20Versionshistorie — 36 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagespi-free
ecosystemsnpm
any_deprecatednein
min_days_since_publish5

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

70Gut · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 3 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
18/20OpenSSF Scorecard: CI-Tests — 12 out of 13 merged PRs checked by a CI test -- score normalized to 9
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
0/10Topics
10/10Wiki
Verwendete Eingangsdaten
topics
has_wikija
homepage
has_readmeja
has_docs_dirja
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

70Gut · 16 % des Gesamtindex
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
2.2/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.2/2.5CI-Tests — 12 out of 13 merged PRs checked by a CI test -- score normalized to 9
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/13 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
4/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
5/5SAST — SAST tool is run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate6,2
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories1
affected_packages1
assessed_packages304
unassessed_packages0
affected_by_severityhigh 1
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 304 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

80Gut · 0 % des Gesamtindex
Wie die Bewertung erfolgt
45/45Agentenanweisungen — agents.md
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 93 von 94 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,989
agent_instruction_filesagents.md
agent_instruction_max_bytes14.680
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — tsconfig.json
10/10Reproduzierbare Umgebung — lockfile
10/10Belegte Agentenpraxis — 15 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8Automatisierte Wartung — 6 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
8/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilespackage-lock.json
has_dockerfilenein
typed_languageja
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configstsconfig.json
agent_commit_share0,15
toolchain_manifests
dependency_bot_commit_share0,06
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — TypeScript (statisch typisiert)
55/55Handhabbare Dateigrößen — 0/103 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageTypeScript
largest_source_bytes43.103
source_files_sampled103
oversized_source_files0

Eckdaten

80GitHub-Sterne
6Mitwirkende
590Commits, letzte 12 Monate
0Tage seit letztem Push
9Releases
1Bus-Faktor
0offene Issues
npmPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 12 ⇿
0Sterne
12Forks
9Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

0246810121222026-032026-052026-07
Major 0Minor 2Patch 7
OpenSSF Scorecard 6.2 / 10
6.2Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-25 04:54 UTC

10Binary-Artifactsno binaries found in the repo
3Branch-Protectionbranch protection is not maximal on development and all release branches
9CI-Tests12 out of 13 merged PRs checked by a CI test -- score normalized to 9
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/13 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
10SASTSAST tool is run on all commits
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
Alle Abhängigkeiten 304

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 304 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
npm@anthropic-ai/sdk0.91.1indirekt
npm@aws-crypto/crc325.2.0indirekt
npm@aws-crypto/sha256-browser5.2.0indirekt
npm@aws-crypto/sha256-js5.2.0indirekt
npm@aws-crypto/supports-web-crypto5.2.0indirekt
npm@aws-crypto/util5.2.0indirekt
npm@aws-sdk/client-bedrock-runtime3.1048.0indirekt
npm@aws-sdk/core3.974.11indirekt
npm@aws-sdk/core3.975.3indirekt
npm@aws-sdk/credential-provider-env3.972.37indirekt
npm@aws-sdk/credential-provider-env3.972.59indirekt
npm@aws-sdk/credential-provider-http3.972.39indirekt
npm@aws-sdk/credential-provider-http3.972.61indirekt
npm@aws-sdk/credential-provider-ini3.972.41indirekt
npm@aws-sdk/credential-provider-ini3.973.4indirekt
npm@aws-sdk/credential-provider-login3.972.41indirekt
npm@aws-sdk/credential-provider-login3.972.66indirekt
npm@aws-sdk/credential-provider-node3.972.42indirekt
npm@aws-sdk/credential-provider-node3.972.70indirekt
npm@aws-sdk/credential-provider-process3.972.37indirekt
npm@aws-sdk/credential-provider-process3.972.59indirekt
npm@aws-sdk/credential-provider-sso3.972.41indirekt
npm@aws-sdk/credential-provider-sso3.973.3indirekt
npm@aws-sdk/credential-provider-web-identity3.972.41indirekt
npm@aws-sdk/credential-provider-web-identity3.972.65indirekt
npm@aws-sdk/eventstream-handler-node3.972.16indirekt
npm@aws-sdk/eventstream-handler-node3.972.29indirekt
npm@aws-sdk/middleware-eventstream3.972.12indirekt
npm@aws-sdk/middleware-eventstream3.972.24indirekt
npm@aws-sdk/middleware-websocket3.972.19indirekt
npm@aws-sdk/middleware-websocket3.972.41indirekt
npm@aws-sdk/nested-clients3.997.33indirekt
npm@aws-sdk/nested-clients3.997.9indirekt
npm@aws-sdk/signature-v4-multi-region3.996.27indirekt
npm@aws-sdk/signature-v4-multi-region3.996.41indirekt
npm@aws-sdk/token-providers3.1048.0indirekt
npm@aws-sdk/token-providers3.1088.0indirekt
npm@aws-sdk/types3.973.8indirekt
npm@aws-sdk/types3.974.2indirekt
npm@aws-sdk/util-locate-window3.965.5indirekt
npm@aws-sdk/util-locate-window3.965.8indirekt
npm@aws-sdk/xml-builder3.972.24indirekt
npm@aws-sdk/xml-builder3.972.36indirekt
npm@aws/lambda-invoke-store0.2.4indirekt
npm@aws/lambda-invoke-store0.3.0indirekt
npm@babel/runtime7.29.2indirekt
npm@babel/runtime7.29.7indirekt
npm@earendil-works/pi-agent-core0.80.10indirekt
npm@earendil-works/pi-ai0.80.10indirekt
npm@earendil-works/pi-coding-agent0.80.10indirekt
npm@earendil-works/pi-tui0.80.10indirekt
npm@emnapi/core1.11.1indirekt
npm@emnapi/runtime1.11.1indirekt
npm@emnapi/wasi-threads1.2.2indirekt
npm@esbuild/aix-ppc640.28.1indirekt
npm@esbuild/android-arm0.28.1indirekt
npm@esbuild/android-arm640.28.1indirekt
npm@esbuild/android-x640.28.1indirekt
npm@esbuild/darwin-arm640.28.1indirekt
npm@esbuild/darwin-x640.28.1indirekt
npm@esbuild/freebsd-arm640.28.1indirekt
npm@esbuild/freebsd-x640.28.1indirekt
npm@esbuild/linux-arm0.28.1indirekt
npm@esbuild/linux-arm640.28.1indirekt
npm@esbuild/linux-ia320.28.1indirekt
npm@esbuild/linux-loong640.28.1indirekt
npm@esbuild/linux-mips64el0.28.1indirekt
npm@esbuild/linux-ppc640.28.1indirekt
npm@esbuild/linux-riscv640.28.1indirekt
npm@esbuild/linux-s390x0.28.1indirekt
npm@esbuild/linux-x640.28.1indirekt
npm@esbuild/netbsd-arm640.28.1indirekt
npm@esbuild/netbsd-x640.28.1indirekt
npm@esbuild/openbsd-arm640.28.1indirekt
npm@esbuild/openbsd-x640.28.1indirekt
npm@esbuild/openharmony-arm640.28.1indirekt
npm@esbuild/sunos-x640.28.1indirekt
npm@esbuild/win32-arm640.28.1indirekt
npm@esbuild/win32-ia320.28.1indirekt
npm@esbuild/win32-x640.28.1indirekt
npm@google/genai1.52.0indirekt
npm@jridgewell/sourcemap-codec1.5.5indirekt
npm@mariozechner/clipboard0.3.9indirekt
npm@mariozechner/clipboard-darwin-arm640.3.9indirekt
npm@mariozechner/clipboard-darwin-universal0.3.9indirekt
npm@mariozechner/clipboard-darwin-x640.3.9indirekt
npm@mariozechner/clipboard-linux-arm64-gnu0.3.9indirekt
npm@mariozechner/clipboard-linux-arm64-musl0.3.9indirekt
npm@mariozechner/clipboard-linux-riscv64-gnu0.3.9indirekt
npm@mariozechner/clipboard-linux-x64-gnu0.3.9indirekt
npm@mariozechner/clipboard-linux-x64-musl0.3.9indirekt
npm@mariozechner/clipboard-win32-arm64-msvc0.3.9indirekt
npm@mariozechner/clipboard-win32-x64-msvc0.3.9indirekt
npm@mistralai/mistralai2.2.6indirekt
npm@napi-rs/wasm-runtime1.1.6indirekt
npm@nodable/entities2.1.0indirekt
npm@opentelemetry/api1.9.0indirekt
npm@opentelemetry/semantic-conventions1.41.1indirekt
npm@opentelemetry/semantic-conventions1.43.0indirekt
npm@oxc-project/types0.139.0indirekt
npm@polka/url1.0.0-next.29indirekt
npm@protobufjs/aspromise1.1.2indirekt
npm@protobufjs/base641.1.2indirekt
npm@protobufjs/codegen2.0.5indirekt
npm@protobufjs/eventemitter1.1.1indirekt
npm@protobufjs/fetch1.1.1indirekt
npm@protobufjs/float1.0.2indirekt
npm@protobufjs/path1.1.2indirekt
npm@protobufjs/pool1.1.0indirekt
npm@protobufjs/utf81.1.1indirekt
npm@protobufjs/utf81.1.2indirekt
npm@rolldown/binding-android-arm641.1.5indirekt
npm@rolldown/binding-darwin-arm641.1.5indirekt
npm@rolldown/binding-darwin-x641.1.5indirekt
npm@rolldown/binding-freebsd-x641.1.5indirekt
npm@rolldown/binding-linux-arm-gnueabihf1.1.5indirekt
npm@rolldown/binding-linux-arm64-gnu1.1.5indirekt
npm@rolldown/binding-linux-arm64-musl1.1.5indirekt
npm@rolldown/binding-linux-ppc64-gnu1.1.5indirekt
npm@rolldown/binding-linux-s390x-gnu1.1.5indirekt
npm@rolldown/binding-linux-x64-gnu1.1.5indirekt
npm@rolldown/binding-linux-x64-musl1.1.5indirekt
npm@rolldown/binding-openharmony-arm641.1.5indirekt
npm@rolldown/binding-wasm32-wasi1.1.5indirekt
npm@rolldown/binding-win32-arm64-msvc1.1.5indirekt
npm@rolldown/binding-win32-x64-msvc1.1.5indirekt
npm@rolldown/pluginutils1.0.1indirekt
npm@silvia-odwyer/photon-node0.3.4indirekt
npm@smithy/core3.24.3indirekt
npm@smithy/core3.29.6indirekt
npm@smithy/credential-provider-imds4.3.3indirekt
npm@smithy/credential-provider-imds4.4.11indirekt
npm@smithy/fetch-http-handler5.4.3indirekt
npm@smithy/fetch-http-handler5.6.8indirekt
npm@smithy/is-array-buffer2.2.0indirekt
npm@smithy/node-http-handler4.7.3indirekt
npm@smithy/node-http-handler4.9.8indirekt
npm@smithy/signature-v45.4.3indirekt
npm@smithy/signature-v45.6.7indirekt
npm@smithy/types4.14.2indirekt
npm@smithy/types4.16.1indirekt
npm@smithy/util-buffer-from2.2.0indirekt
npm@smithy/util-utf82.3.0indirekt
npm@standard-schema/spec1.1.0indirekt
npm@tybys/wasm-util0.10.3indirekt
npm@types/chai5.2.3indirekt
npm@types/deep-eql4.0.2indirekt
npm@types/estree1.0.9indirekt
npm@types/node22.19.19indirekt
npm@types/node26.1.1indirekt
npm@types/retry0.12.0indirekt
npm@typescript/typescript-aix-ppc647.0.2indirekt
npm@typescript/typescript-darwin-arm647.0.2indirekt
npm@typescript/typescript-darwin-x647.0.2indirekt
npm@typescript/typescript-freebsd-arm647.0.2indirekt
npm@typescript/typescript-freebsd-x647.0.2indirekt
npm@typescript/typescript-linux-arm7.0.2indirekt
npm@typescript/typescript-linux-arm647.0.2indirekt
npm@typescript/typescript-linux-loong647.0.2indirekt
npm@typescript/typescript-linux-mips64el7.0.2indirekt
npm@typescript/typescript-linux-ppc647.0.2indirekt
npm@typescript/typescript-linux-riscv647.0.2indirekt
npm@typescript/typescript-linux-s390x7.0.2indirekt
npm@typescript/typescript-linux-x647.0.2indirekt
npm@typescript/typescript-netbsd-arm647.0.2indirekt
npm@typescript/typescript-netbsd-x647.0.2indirekt
npm@typescript/typescript-openbsd-arm647.0.2indirekt
npm@typescript/typescript-openbsd-x647.0.2indirekt
npm@typescript/typescript-sunos-x647.0.2indirekt
npm@typescript/typescript-win32-arm647.0.2indirekt
npm@typescript/typescript-win32-x647.0.2indirekt
npm@vitest/expect4.1.10indirekt
npm@vitest/mocker4.1.10indirekt
npm@vitest/pretty-format4.1.10indirekt
npm@vitest/runner4.1.10indirekt
npm@vitest/snapshot4.1.10indirekt
npm@vitest/spy4.1.10indirekt
npm@vitest/ui4.1.10indirekt
npm@vitest/utils4.1.10indirekt
npmagent-base7.1.4indirekt
npmassertion-error2.0.1indirekt
npmbalanced-match4.0.4indirekt
npmbase64-js1.5.1indirekt
npmbignumber.js9.3.1indirekt
npmbowser2.14.1indirekt
npmbrace-expansion5.0.7indirekt
npmbuffer-equal-constant-time1.0.1indirekt
npmchai6.2.2indirekt
npmchalk5.6.2indirekt
npmconvert-source-map2.0.0indirekt
npmcross-spawn7.0.6indirekt
npmdata-uri-to-buffer4.0.1indirekt
npmdebug4.4.3indirekt
npmdetect-libc2.1.2indirekt
npmdiff8.0.4indirekt
npmecdsa-sig-formatter1.0.11indirekt
npmes-module-lexer2.3.1indirekt
npmesbuild0.28.1indirekt
npmestree-walker3.0.3indirekt
npmexpect-type1.4.0indirekt
npmextend3.0.2indirekt
npmfast-xml-builder1.2.0indirekt
npmfast-xml-parser5.7.3indirekt
npmfdir6.5.0indirekt
npmfetch-blob3.2.0indirekt
npmfflate0.8.3indirekt
npmflatted3.4.2indirekt
npmformdata-polyfill4.0.10indirekt
npmfsevents2.3.3indirekt
npmgaxios7.1.4indirekt
npmgaxios7.2.0indirekt
npmgcp-metadata8.1.2indirekt
npmget-east-asian-width1.6.0indirekt
npmglob13.0.6indirekt
npmgoogle-auth-library10.6.2indirekt
npmgoogle-auth-library10.9.0indirekt
npmgoogle-logging-utils1.1.3indirekt
npmgraceful-fs4.2.11indirekt
npmhighlight.js10.7.3indirekt
npmhosted-git-info9.0.3indirekt
npmhttp-proxy-agent7.0.2indirekt
npmhttps-proxy-agent7.0.6indirekt
npmignore7.0.5indirekt
npmisexe2.0.0indirekt
npmjiti2.7.0indirekt
npmjson-bigint1.0.0indirekt
npmjson-schema-to-ts3.1.1indirekt
npmjwa2.0.1indirekt
npmjws4.0.1indirekt
npmlightningcss1.33.0indirekt
npmlightningcss-android-arm641.33.0indirekt
npmlightningcss-darwin-arm641.33.0indirekt
npmlightningcss-darwin-x641.33.0indirekt
npmlightningcss-freebsd-x641.33.0indirekt
npmlightningcss-linux-arm-gnueabihf1.33.0indirekt
npmlightningcss-linux-arm64-gnu1.33.0indirekt
npmlightningcss-linux-arm64-musl1.33.0indirekt
npmlightningcss-linux-x64-gnu1.33.0indirekt
npmlightningcss-linux-x64-musl1.33.0indirekt
npmlightningcss-win32-arm64-msvc1.33.0indirekt
npmlightningcss-win32-x64-msvc1.33.0indirekt
npmlong5.3.2indirekt
npmlru-cache11.4.0indirekt
npmmagic-string0.30.21indirekt
npmmarked18.0.5indirekt
npmminimatch10.2.5indirekt
npmminipass7.1.3indirekt
npmmrmime2.0.1indirekt
npmms2.1.3indirekt
npmnanoid3.3.16indirekt
npmnode-domexception1.0.0indirekt
npmnode-fetch3.3.2indirekt
npmobug2.1.4indirekt
npmopenai6.26.0indirekt
npmp-retry4.6.2indirekt
npmpartial-json0.1.7indirekt
npmpath-expression-matcher1.5.0indirekt
npmpath-key3.1.1indirekt
npmpath-scurry2.0.2indirekt
npmpathe2.0.3indirekt
npmpicocolors1.1.1indirekt
npmpicomatch4.0.5indirekt
npmpostcss8.5.20indirekt
npmproper-lockfile4.1.2indirekt
npmprotobufjs7.6.5indirekt
npmretry0.12.0indirekt
npmretry0.13.1indirekt
npmrolldown1.1.5indirekt
npmsafe-buffer5.2.1indirekt
npmsemver7.8.0indirekt
npmshebang-command2.0.0indirekt
npmshebang-regex3.0.0indirekt
npmsiginfo2.0.0indirekt
npmsignal-exit3.0.7indirekt
npmsirv3.0.2indirekt
npmsource-map-js1.2.1indirekt
npmstackback0.0.2indirekt
npmstd-env4.2.0indirekt
npmstrnum2.3.0indirekt
npmtinybench2.9.0indirekt
npmtinyexec1.2.4indirekt
npmtinyglobby0.2.17indirekt
npmtinyrainbow3.1.0indirekt
npmtotalist3.0.1indirekt
npmts-algebra2.0.0indirekt
npmtslib2.8.1indirekt
npmtsx4.23.1indirekt
npmtypebox1.1.38indirekt
npmtypescript7.0.2indirekt
npmundici8.5.0indirekt
npmundici-types6.21.0indirekt
npmundici-types8.3.0indirekt
npmvite8.1.5indirekt
npmvitest4.1.10indirekt
npmweb-streams-polyfill3.3.3indirekt
npmwhich2.0.2indirekt
npmwhy-is-node-running2.3.0indirekt
npmws8.21.0indirekt
npmws8.21.1indirekt
npmxml-naming0.1.0indirekt
npmyaml2.9.0indirekt
npmzod3.25.76indirekt
npmzod4.4.3indirekt
npmzod-to-json-schema3.25.2indirekt
Abhängigkeits-Advisories 1

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 304 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 1 tragen bekannte Advisories, davon 0 direkte.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
brace-expansion5.0.7indirekthoch15.0.8

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 2705,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "JavaScript": 25582,
        "TypeScript": 792213
      },
      "pushed_at": "2026-07-24T13:30:34Z",
      "created_at": "2026-03-18T19:53:32Z",
      "owner_type": "User",
      "updated_at": "2026-07-25T01:41:39Z",
      "description": "All-in-one free/freemium/paid model providers for Pi",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Apostolos Mantzaris",
      "type": "User",
      "login": "apmantza",
      "company": null,
      "location": "Athens, Greece",
      "followers": 10,
      "avatar_url": "https://avatars.githubusercontent.com/u/247365598?v=4",
      "created_at": "2025-12-02T11:31:45Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 234
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.2.8",
          "kind": "patch",
          "published_at": "2026-07-21T11:43:02Z"
        },
        {
          "tag": "v2.2.7",
          "kind": "patch",
          "published_at": "2026-07-10T08:29:27Z"
        },
        {
          "tag": "v2.2.6",
          "kind": "patch",
          "published_at": "2026-07-09T08:14:46Z"
        },
        {
          "tag": "v2.2.5",
          "kind": "patch",
          "published_at": "2026-06-28T19:07:06Z"
        },
        {
          "tag": "v2.2.4",
          "kind": "patch",
          "published_at": "2026-06-27T06:28:17Z"
        },
        {
          "tag": "v2.2.3",
          "kind": "patch",
          "published_at": "2026-06-19T12:29:00Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2026-06-19T10:39:42Z"
        },
        {
          "tag": "v2.1.1",
          "kind": "patch",
          "published_at": "2026-06-15T16:32:40Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2026-06-14T23:11:47Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6ca913bbdd726e274787b772e4261440c3a24bb7",
          "body": "fix: opencode-dynamic API not registered in compat registry",
          "is_bot": false,
          "headline": "Merge pull request #341 from kuuhaku-00/master",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-24T13:30:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e71d3724261b8bc3b98e19e51994c1db5a03fc0e",
          "body": "SonarQube: Using pseudorandom number generator Math.random() is not\ncryptographically safe. Use randomBytes from node:crypto instead,\nwhich is already imported in this file.",
          "is_bot": false,
          "headline": "fix: replace Math.random() with crypto.randomBytes() for sourceId",
          "author_name": "kuuhaku",
          "author_login": "kuuhaku-00",
          "committed_at": "2026-07-24T02:39:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31fb6155b9b8e4b490d1607cfb5eeaed6e9c3900",
          "body": null,
          "is_bot": false,
          "headline": "fix: opencode-dynamic API not registered in compat registry",
          "author_name": "kuuhaku",
          "author_login": "kuuhaku-00",
          "committed_at": "2026-07-24T01:32:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "354f1461ebf778a66ff109cdb1ba7ec8dcb0a3b5",
          "body": "release: 2.2.8",
          "is_bot": false,
          "headline": "Merge pull request #340 from apmantza/release/2.2.8",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T11:42:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93f4a098c93f120ef6eb8b4e5ce664e66578777f",
          "body": "This reverts commit 8effd05102728878c49a65b1d7117aa9e5c7118b.",
          "is_bot": false,
          "headline": "Revert \"fix: resolve SonarCloud issues for v2.2.8\"",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T11:36:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8effd05102728878c49a65b1d7117aa9e5c7118b",
          "body": "Add --ignore-scripts to npm ci calls in release.yml to prevent\nlifecycle scripts from running during package installation, addressing\nSonarCloud rule githubactions:S6505 (MAJOR vulnerability).\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve SonarCloud issues for v2.2.8",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T11:35:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e764a4167b7d3645c1b0bb590eab4ef6a2750b98",
          "body": "Bump version to 2.2.8, update changelog, and migrate release workflow\nto npm trusted publishing (OIDC) — no NPM_TOKEN secret needed.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: 2.2.8 — reliability and performance pass",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T11:25:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6345e9baf0ece9e66b2d38fed89865119a429204",
          "body": "fix: lens diagnostics — guard JSON.parse calls and remove dead exports",
          "is_bot": false,
          "headline": "Merge pull request #339 from apmantza/fix/lens-diagnostics",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T10:21:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f617c2c51c2ce2e645d925f8dd13c19b2ee53611",
          "body": "Removed unused exports from constants.ts and lib/types.ts that had zero\nimports outside their own file (leftovers from removed providers and a\nsuperseded OpenRouter/Zen type set).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: remove dead exports flagged by knip",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T10:10:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "84e3ef9cfaea81e46b1ce5cfc01dcfacfb8a18be",
          "body": "MD5 is protocol-mandatory for the COSY signature scheme reverse-engineered\nfrom the Qoder CLI. Cannot upgrade to SHA-256 without breaking the upstream\nprotocol contract. The pi-lens-ignore directives sit next to the existing\nsonar-security comments for context.\n\nCo-authored-by: Apostolos Mantzaris <ap.mantza@gmail.com>",
          "is_bot": false,
          "headline": "chore: suppress ts-weak-hash on COSY MD5 calls (#338)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T10:07:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d05ee837d623feb8fe407ffdcc685ef7c4a4831",
          "body": "- hardcoded-benchmarks.ts: wrap benchmarks.json load in try/catch so a\n  corrupt or missing file degrades to empty benchmarks instead of\n  crashing the extension\n- cline-xml-bridge.ts: wrap SSE chunk JSON.parse in try/catch so a\n  malformed data line is logged and skipped instead of throwing\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: guard unhandled JSON.parse calls in benchmarks and SSE parsing",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T10:07:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "99c2f5222fd95995b62e1411e1b7ee997e18e8fd",
          "body": "docs: update changelog with unreleased changes",
          "is_bot": false,
          "headline": "Merge pull request #337 from apmantza/docs/changelog-unreleased",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:45:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43f8ff9c903e962a2cb21ada3352bbb2398c69c0",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: update changelog with unreleased changes",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:44:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "643bc1feef95bec5f624afc005dbacc02278620d",
          "body": "perf: use atomic updateConfig for probe hidden-model writes",
          "is_bot": false,
          "headline": "Merge pull request #336 from apmantza/perf/batch-probe-writes-319",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:43:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b714965af286394508dc1517bc14b73a00f557e3",
          "body": "fix: warn when provider registers with 0 models due to fetch failure",
          "is_bot": false,
          "headline": "Merge pull request #335 from apmantza/fix/empty-provider-323",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:43:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c751de94656bcecab74eaec3fc45159ea3d0b73",
          "body": "fix: guard global event handlers against duplicate registration on reload",
          "is_bot": false,
          "headline": "Merge pull request #334 from apmantza/fix/handler-cleanup-325",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:43:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e46a03e1763d83315c727c41e9bf9a473fa25230",
          "body": "fix: OAuth retry, persistence failure escalation, XML parse warning",
          "is_bot": false,
          "headline": "Merge pull request #333 from apmantza/fix/observability-326",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:43:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eddb55984f00f046f93e4b84145ab39188b8f522",
          "body": "Both Ollama and Routeway probes already batch broken model IDs before\nwriting, but used the non-atomic loadConfigFile() + saveConfig() pattern.\nIf two providers' probes finish concurrently, the second write could\noverwrite the first's hidden_models update. Switch to updateConfig()\nwhich serialises through ConfigLock and does a fresh read inside the\nlock, making the read-modify-write atomic.\n\nCloses #319\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf: use atomic updateConfig for probe hidden-model writes",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:37:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b903b2ffe34c814fab65c632fd017b30fdc45ec8",
          "body": "…and empty cache\n\nWhen `loadCachedOrFetchModels` catches a network error and has no disk cache\nto fall back on, it previously returned `[]` with no user-visible signal.\nElevate the log call to `_logger.warn` with a clear message so the log file\nmakes the root cause obvious instead of leaving the use\n[…]\n models.\n\nAlso adds a logger mock and updates the corresponding test to assert the warn\nis emitted in this exact failure scenario.\n\nCloses #323\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: warn when provider registers with 0 models due to fetch failure …",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:37:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e2c15b85ffe69e456ce82af8b8515d43420bedaf",
          "body": "…load (#325)\n\nAdds a module-level `_handlersRegistered` flag in `index.ts` to prevent\n`setupGlobalCommands`, `setupQuotaMonitoring`, and `setupTelemetry` from\nregistering duplicate `pi.on` handlers when the extension is reloaded.\nSince `pi.on()` returns `void` (no unsubscribe function), skipping\nre-\n[…]\nprovider is\nregistered with zero models due to a failed fetch with no usable cache,\nturning a previously silent failure into an observable one.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: guard global event handlers against duplicate registration on re…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:37:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "82519d4c97055c0bd38caf4b3f55747c6ed37034",
          "body": "…warn (#326)\n\n- refreshClineToken: add one bounded retry (1 s delay) before throwing,\n  with logger.warn on both the first failure and the final failure after\n  retry; extract attempt logic into a private helper.\n- loadCachedOrFetchModels: track consecutive persistence failures per\n  provider; log a\n[…]\nwere found but the\n  raw text contains well-known Cline XML tool tags, emit a _logger.warn\n  with a preview to surface silent parse mismatches.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(observability): add retry, persistence escalation, and XML parse …",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:36:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8de5940691290af93698d44d782b2b668f99c342",
          "body": "fix: call-id telemetry tracking and structured logging for silent failures",
          "is_bot": false,
          "headline": "Merge pull request #332 from apmantza/fix/telemetry-and-observability",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:16:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c24f153192a8e013ef84284bb760b72b50d941cb",
          "body": "fix: back up corrupt config files and serialise saveConfig writes",
          "is_bot": false,
          "headline": "Merge pull request #330 from apmantza/fix/config-write-safety",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:16:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a62ba8f4509c44094aa61defc0d0d487d0512526",
          "body": "perf: optimize provider caches and benchmark regexes",
          "is_bot": false,
          "headline": "Merge pull request #329 from apmantza/perf/cache-and-regex",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:16:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6ff6be41b27940c7339bd3a3723988ddd610331",
          "body": "…lures\n\nTelemetry (#322):\n- Replace key-based in-flight tracking with unique call ids returned from\n  startModelCall and passed to recordModelCall, eliminating provider-id\n  drift between start/record and preventing TTL reaping from corrupting\n  latency measurements\n- Discard latency samples over 10\n[…]\nebug logging with\n  logger.warn calls for FS write/read failures\n- Add createLogger to benchmark-lookup.ts and cline-xml-bridge.ts\n\nCloses #322\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: call-id telemetry tracking and structured logging for silent fai…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:15:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1b17b7dcd06319ff9355c8d5f9c7edbd909cff18",
          "body": "Previously a corrupt ~/.pi/free.json blocked all config writes until the\nuser manually fixed it. Now the original bytes are preserved in a\ntimestamped 0600 backup and the file is reset from the template so the\nextension keeps working. saveConfig is now async and serialised through\nthe config lock to prevent concurrent-write clobbering, with all callers\nupdated, and file permissions are re-restricted after every write.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: back up corrupt config files and serialise saveConfig writes",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:15:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b48dfc263214e3dcffe3c0a35b86ce57130a0dea",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: wrap long lines from cache optimization changes",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:15:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3390c4b43fcd93d84e3195e37ee1d5c655c41c7c",
          "body": null,
          "is_bot": false,
          "headline": "perf: optimize provider caches and benchmark regexes (#317 #318 #327)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:15:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c505f94092bb5649584404d9defb7e68be98cd7",
          "body": "perf: defer benchmark loading and cache lookup indexes",
          "is_bot": false,
          "headline": "Merge pull request #328 from apmantza/perf/benchmark-lookup-index",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:15:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da0d70b5e1740adcdb9cc0a21b990f72e94bcd45",
          "body": "…json\n\nThe lazy-loaded benchmarks.json catalog (b6a2433) replaced the hardcoded\nbenchmarks-chunk-*.ts files. Delete the chunks, simplify the update\nscript, and require benchmarks.json in the tarball check since the\nruntime now depends on it.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf: remove obsolete benchmark chunk files superseded by benchmarks.…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:13:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b8f61a2e4da0a070c94a0337eaf304cf4315713c",
          "body": "…320)",
          "is_bot": false,
          "headline": "perf: defer benchmark loading and cache lookup indexes (#315, #316, #…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:13:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84b0fe1f86378ceca3d7e1c3fddc671e236807ae",
          "body": "chore: fix npm audit failures from peer-dep transitive vulnerabilities",
          "is_bot": false,
          "headline": "Merge pull request #331 from apmantza/chore/audit-fix-peer-deps",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-21T09:12:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9217c325ad976fa5422f58f6f297d0811e71dc70",
          "body": "npm install regenerates the lockfile, which undoes the pinned\nbrace-expansion/protobufjs versions that fix the audit vulnerabilities.\nnpm ci installs exactly what the lockfile specifies, which is the\nstandard CI best practice.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: use npm ci instead of npm install for deterministic builds",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T09:10:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c74f28d10f749db977355e7088162afa671912fd",
          "body": "brace-expansion@5.0.6 (GHSA-3jxr-9vmj-r5cp) and protobufjs@7.6.4\n(GHSA-j3f2-48v5-ccww) are installed as peer-resolved transitive deps of\n@earendil-works/pi-coding-agent@0.80.10. npm 11 doesn't apply overrides\nto peer-installed nested copies, so we:\n\n1. Add overrides for both packages in package.json\n[…]\nctively\n\nnpm ci (used by CI) respects the lockfile exactly; npm install will\nrecalculate but the overrides + devDeps ensure correct resolution.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: fix npm audit failures from peer-dep transitive vulnerabilities",
          "author_name": "Apostolos Mantzaris",
          "author_login": "wastedC",
          "committed_at": "2026-07-21T08:57:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0ff75b0b365d19b330b9f10cc6497bae8398ba59",
          "body": "…ns/setup-node-7.0.0\n\nchore(ci): bump actions/setup-node from 6.4.0 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #314 from apmantza/dependabot/github_actions/actio…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-20T15:37:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "805d11f09aeb0bd21fe89f44a91d4aed6900b55d",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...820762786026740c76f36085b0efc47a31fe5020)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(ci): bump actions/setup-node from 6.4.0 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T11:55:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6119a187afa8f444376026836b60649cac3d3621",
          "body": "refactor: migrate auth checks to Pi runtime APIs",
          "is_bot": false,
          "headline": "Merge pull request #312 from apmantza/feat/modelruntime-migration",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-16T18:32:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36449a2c70704f562b594beb82db236cc3d7d616",
          "body": null,
          "is_bot": false,
          "headline": "refactor: migrate auth checks to Pi runtime APIs",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T18:26:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24826dac870e4f692600c020459a61bd4592340e",
          "body": "fix: guard modelRegistry.authStorage for pi v0.80 compatibility",
          "is_bot": false,
          "headline": "Merge pull request #311 from Faks/feat/fix-authstorage-pi080",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-16T18:18:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c28095690aef384a9fa4021f78bb4cd56f68c52e",
          "body": null,
          "is_bot": false,
          "headline": "fix: type auth storage compatibility guard",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T18:14:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38ba731e3977e731b5a7d9db7ba47610cd5c455c",
          "body": "Pi v0.80 removed authStorage from modelRegistry, so the previous\nctx.modelRegistry.authStorage.get(...) calls crashed extension\nbinding with 'Cannot read properties of undefined (reading get)'.\nUse optional chaining (matching the existing qwen.ts pattern) so the\ncredential lookup is a no-op when authStorage is unavailable.",
          "is_bot": false,
          "headline": "fix: guard modelRegistry.authStorage for pi v0.80 compatibility",
          "author_name": "Oskars Germovs",
          "author_login": "Faks",
          "committed_at": "2026-07-16T17:25:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3a44ed26b14fed8f0f9cfa1c2dc3bf510b75e46",
          "body": "ci: pin GitHub Actions to immutable commits",
          "is_bot": false,
          "headline": "Merge pull request #310 from apmantza/chore/remove-deprecated-providers",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-16T12:08:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3739da41523c42809c183616e946a0759f0d129",
          "body": null,
          "is_bot": false,
          "headline": "ci: pin GitHub Actions to immutable commits",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T10:13:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60a5ecf6637ac0a5c7240d93e05c5de89836a9ca",
          "body": null,
          "is_bot": false,
          "headline": "refactor: remove unused getConfig export",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T09:48:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00ff1c331a5b265fae97c714b04da04925e730c6",
          "body": "chore: align with Pi 0.80.7 compatibility API",
          "is_bot": false,
          "headline": "Merge pull request #309 from apmantza/chore/remove-deprecated-providers",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-16T09:36:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c2710b6fa34d727e8276c83708d02e2105fc3d1",
          "body": null,
          "is_bot": false,
          "headline": "fix: clean config diagnostics",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T09:34:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "debb518bba396091fb9e5bd77c2b16c145cee105",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh Pi 0.80.7 lockfile",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T09:30:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fec2d3cb8d28c5e88a22d7814ff24d413c53b803",
          "body": null,
          "is_bot": false,
          "headline": "chore: align imports with Pi 0.80 compat API",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-16T09:28:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1601d24a51ce94e0921c34a9ab76f9aa1cb865a6",
          "body": "chore: remove deprecated Qwen and Modal providers",
          "is_bot": false,
          "headline": "Merge pull request #306 from apmantza/chore/remove-deprecated-providers",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-15T10:41:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75ddb261c657c7eb60c7897d3eb1c5ad3498e7b7",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove deprecated Qwen and Modal providers",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-15T10:22:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbf14ba01a10d2a603a459a1479177c9dbb26ff2",
          "body": "…ment-dependencies-1591b34b37\n\nchore(deps): bump the development-dependencies group with 2 updates",
          "is_bot": false,
          "headline": "Merge pull request #305 from apmantza/dependabot/npm_and_yarn/develop…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-13T14:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5573e5b5b73e992f7b40deaf55b90f632db3cd4",
          "body": "Bumps the development-dependencies group with 2 updates: [tsx](https://github.com/privatenumber/tsx) and [typescript](https://github.com/microsoft/TypeScript).\n\n\nUpdates `tsx` from 4.23.0 to 4.23.1\n- [Release notes](https://github.com/privatenumber/tsx/releases)\n- [Changelog](https://github.com/priv\n[…]\ncy-version: 7.0.2\n  dependency-type: direct:development\n  update-type: version-update:semver-major\n  dependency-group: development-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the development-dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T11:55:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77bed2d8c8f16a3269ec357f5db750454b2f22db",
          "body": "chore: prepare v2.2.7 release",
          "is_bot": false,
          "headline": "Merge pull request #304 from apmantza/release/2.2.7",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-10T08:29:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "915f25f4192534cbbae98484cbbadec35e1e89a9",
          "body": null,
          "is_bot": false,
          "headline": "chore: prepare v2.2.7 release",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-10T08:26:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "196220ef8bcfab19c4ae4c080135522d5bcb495b",
          "body": "fix: preserve AnyAPI model context metadata",
          "is_bot": false,
          "headline": "Merge pull request #303 from apmantza/fix/anyapi-context-window",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-10T08:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2271b832ebc617a7e2619952f32de7a50fdb905b",
          "body": null,
          "is_bot": false,
          "headline": "fix: preserve AnyAPI model context metadata",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-10T08:10:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb7b4b7becc9c79c99be2e994903d48a059eddac",
          "body": "fix(tokenrouter): resolve pi-ai lazy import that broke extension load",
          "is_bot": false,
          "headline": "Merge pull request #302 from apmantza/fix/tokenrouter-pi-ai-lazy-import",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-10T08:00:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20916132f90b0986f6f19f37d81965b05238e4c4",
          "body": "The pi extension host's jiti loader only aliases @earendil-works/pi-ai,\nits /compat, and /oauth subpaths. Any other subpath (like\n/api/openai-completions.lazy) gets prefix-substituted into the compat.js\nfile path plus the literal suffix, producing an unresolvable path and\nbreaking extension load ent\n[…]\nnai-completions.lazy'\n\ncompat.js already re-exports openAICompletionsApi, so importing it from\nthe /compat subpath resolves correctly under both the host's jiti alias\nand standard npm package exports.",
          "is_bot": false,
          "headline": "fix(tokenrouter): use compat subpath for pi-ai lazy import",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-10T07:58:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acb4bfb39bac5e4b29a8514d2a05de235b8cd833",
          "body": "feat: add AnyAPI free model provider",
          "is_bot": false,
          "headline": "Merge pull request #301 from apmantza/feat/anyapi-provider",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-10T07:37:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0071e5dfc00e7f6b8293f9a824537cc2d7c0aef7",
          "body": null,
          "is_bot": false,
          "headline": "feat: add AnyAPI free model provider",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-10T07:33:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76c7f79a7b907d13fd462c60992961d747322657",
          "body": "Fix Pi 0.80 SDK dependency compatibility",
          "is_bot": false,
          "headline": "Merge pull request #300 from apmantza/fix/pi-080-deps-299",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-10T06:29:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c6358ada5e5bb3b23ec7ab90b80809fb5148cc7",
          "body": null,
          "is_bot": false,
          "headline": "fix: replace all Pi AI export wildcards",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-10T06:27:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ddbf0f996968fbbfaaaa60743092e1d55fcb6bd",
          "body": null,
          "is_bot": false,
          "headline": "fix: support Pi 0.80 SDK dependencies (#299)",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-10T06:23:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8b8340999d5fca72589415c4f2e427321cb0957",
          "body": "docs: credit @lmilojevicc in 2.2.6 changelog",
          "is_bot": false,
          "headline": "Merge pull request #298 from apmantza/docs/credit-2.2.6",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-09T09:40:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55327cf36c185c11e07992072b21e5efba615c2d",
          "body": null,
          "is_bot": false,
          "headline": "docs: credit @lmilojevicc for 2.2.6 cache-first startup perf",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-09T09:40:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e5ace706875aa087b287bc1dd356811b0e73e7b",
          "body": "chore(release): 2.2.6",
          "is_bot": false,
          "headline": "Merge pull request #297 from apmantza/release/2.2.6",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-09T08:14:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "692b7bf34062a4321d67fe58eebe566de6f94114",
          "body": "- Bump version to 2.2.6\n- Move [Unreleased] into dated 2.2.6 section\n- Highlight cache-first startup perf win (~2.1s -> ~70ms) in release notes",
          "is_bot": false,
          "headline": "chore(release): 2.2.6",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-09T08:13:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "719e3cd92f8c7fd7e04cc408a28e297ec63ed33d",
          "body": "refactor: remove Codestral provider",
          "is_bot": false,
          "headline": "Merge pull request #296 from apmantza/remove-codestral",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-09T07:56:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4df0d8d67e3b052037c58322906e175ac66e0731",
          "body": "Codestral's free tier is no longer available; Mistral is reachable via\npi's built-in dynamic provider (MISTRAL_API_KEY). This removes the\nCodestral registration, its constants, config getters, docs, and the\nbanner mention.\n\n- Drop providers/codestral/codestral.ts\n- Remove PROVIDER_CODESTRAL / BASE_URL_CODESTRAL / ALL_UNIQUE_PROVIDERS entry\n- Remove codestral config getters and PROVIDER_META entry\n- Update README, agents.md, docs, banner.svg\n- Add CHANGELOG entry",
          "is_bot": false,
          "headline": "refactor: remove Codestral provider",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-09T07:49:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f3dbe2a0327a50cf52766122176955a3a04791e",
          "body": "refactor: review follow-up for PR #294 — logging and dynamic cache helper",
          "is_bot": false,
          "headline": "Merge pull request #295 from apmantza/post-294-review-fixes",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-08T20:36:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca4d4b5c932a5d62095eaaeb156036c2dbc365bf",
          "body": "- Log swallowed errors in readRawConfigFile().\n\n- Differentiate invalid JSON from missing/unreadable config in loadConfigFile().\n\n- Keep both paths logged at error level.\n\n- Add a warning when Kilo starts with no available models.",
          "is_bot": false,
          "headline": "refactor: log config read errors and warn on empty Kilo startup",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-08T20:29:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ba579bae5ad20cff3193af33aff103a90c8b277",
          "body": "Adds a test ensuring setupDynamicBuiltInProviders leaves Pi defaults when\n\nloadCachedOrFetchModels returns an empty model list.",
          "is_bot": false,
          "headline": "test: cover empty fallback path in dynamic built-in providers",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-08T20:17:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8dd88cb0dffde30387f25c185c4d8a3cd5d23a4",
          "body": "- Replace the inline cache-first logic in discoverAndRegister with the shared\n\n  loadCachedOrFetchModels helper so dynamic providers use the same fallback,\n\n  persistence, and error-logging path as static providers.\n\n- Update the dynamic-built-in test mock to proxy through loadCachedOrFetchModels\n\n  and add a test covering the warm-cache registration path.",
          "is_bot": false,
          "headline": "refactor: reuse loadCachedOrFetchModels in dynamic built-in",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-08T20:01:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ff612ce4adc0a879e3d2ac6113fa6d755c5c72d",
          "body": "- Replace silent `.catch(() => {})` on saveProviderCacheGuarded with\n  structured logging in provider-helper, dynamic-built-in, and kilo.\n- Log the secondary free-only Kilo fetch failure so it isn't swallowed.\n- Return Object.freeze() from loadConfigFile to prevent callers from\n  mutating the shared memoized config object.\n- Use a single statSync result in loadConfigFile to avoid a TOCTOU\n  window between the mtime check and the read.",
          "is_bot": false,
          "headline": "refactor: log cache errors and freeze memoized config",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-08T20:01:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afa8804bdf93c7aab78eac7a2539b9cbbbe7fc54",
          "body": "perf: cache-first provider loading — warm startup ~2.1s→~70ms (30×)",
          "is_bot": false,
          "headline": "Merge pull request #294 from lmilojevicc/speed-up-initial-load",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-08T20:00:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78e543d1c77f46d5a4aa76a159e3994adc53749a",
          "body": "Speed up pi-free initial load by serving cached model lists from\n~/.pi/provider-cache.json on warm startup instead of re-fetching every\nprovider's model list over the network.\n\nChanges:\n- index.ts: run the dynamic built-in phase (e.g. FastRouter) concurrently\n  with the static providers (one Promise\n[…]\n registered,\nverified via A/B comparison). Tests: 464/464. Lint clean.\n\nCHANGELOG notes are under [Unreleased]; version bump + tag are left to the\nmaintainer's chore(release) step per repo convention.",
          "is_bot": false,
          "headline": "perf: cache-first provider loading — warm startup ~2.1s→~70ms (30x)",
          "author_name": "pi-agent",
          "author_login": null,
          "committed_at": "2026-07-07T22:39:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d10dde671812334be25732a2004ea812b9a600b3",
          "body": "…ment-dependencies-383b9a52ac\n\nchore(deps): bump the development-dependencies group with 3 updates",
          "is_bot": false,
          "headline": "Merge pull request #292 from apmantza/dependabot/npm_and_yarn/develop…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-06T12:25:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b29bec5b97cb320a69dfc763f4897336461f40e4",
          "body": "Bumps the development-dependencies group with 3 updates: [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui), [tsx](https://github.com/privatenumber/tsx) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\n\n\nUpdates `@vitest/ui` from 4.1.9 to 4.1.10\n- [\n[…]\ny-version: 4.1.10\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n  dependency-group: development-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the development-dependencies group with 3 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T11:55:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "761b7ea109c9b4b9890bbaf9a585388ec3c834b0",
          "body": "chore: update benchmark data from Artificial Analysis",
          "is_bot": false,
          "headline": "Merge pull request #291 from apmantza/update-benchmarks-22",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-07-03T21:24:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be48c0b729a71e0b4bd2a937902e810a300bbd63",
          "body": "Replace hardcoded CI score expectations (47.1, 56.0, etc.) with\nformat and range checks so benchmark data updates don't break tests.",
          "is_bot": false,
          "headline": "test(benchmark-lookup): make assertions data-agnostic",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-07-03T21:23:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d6fa652623d66c167c55ca5a022f29c4b70610d",
          "body": null,
          "is_bot": false,
          "headline": "chore: update benchmark data from Artificial Analysis",
          "author_name": "apmantza",
          "author_login": "apmantza",
          "committed_at": "2026-07-01T02:52:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2d8d9f11c5e0dd0b5cca7d3d764e2398341ee28",
          "body": "…ns/checkout-7.0.0\n\nchore(ci): bump actions/checkout from 4.2.2 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #290 from apmantza/dependabot/github_actions/actio…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-29T16:58:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41662b03729f97c5003913162a0d2766d381dbc4",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Commits](https://github.com/actions/checkout/compare/v4.2.2...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(ci): bump actions/checkout from 4.2.2 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T11:54:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33a553a2fedf96da376c32610161dbe483679ad6",
          "body": "fix(release): authenticate tag push",
          "is_bot": false,
          "headline": "Merge pull request #289 from apmantza/fix/release-tag-auth",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-28T19:06:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ef79bf012057c1190397e2a9891394a267b0d6d",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): authenticate tag push",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-06-28T19:04:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b453401dd675fdcc8114e9b3438a7154baf617e0",
          "body": "chore(release): 2.2.5",
          "is_bot": false,
          "headline": "Merge pull request #288 from apmantza/release/2.2.5",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-28T19:01:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bf21e56672e7259dbd5408e46d3cf18db1c9aa5",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): 2.2.5",
          "author_name": "Pi Agent",
          "author_login": null,
          "committed_at": "2026-06-28T18:54:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a210687e2c3376537ff6238733d8d8add59a8c4b",
          "body": "- Run discovered OpenCode models through isFreeModel with the full model list\n- Add authoritative _freeKnown/_isFree flags to on-demand discovered models\n- Use a non-zero sentinel cost for discovered non-free models so the picker does not label all OpenCode models as free\n- Update tests to cover free and non-free OpenCode discovery\n\nCo-authored-by: Pi Agent <agent@pi.local>",
          "is_bot": false,
          "headline": "fix(opencode): mark discovered non-free models as paid (#287)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-28T18:28:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3bc7547a28968b324bbe5d36316cc366e1563aa",
          "body": "- Add on-demand /models discovery for built-in toggles when Pi has not populated modelRegistry yet\n- Use saved OpenCode/OpenRouter credentials for fallback discovery\n- Preserve OpenCode dynamic stream wrapper for discovered models\n- Keep warning only when both registry capture and discovery fail\n- Cover OpenCode on-demand discovery and no-key fallback in tests\n\nCo-authored-by: Pi Agent <agent@pi.local>",
          "is_bot": false,
          "headline": "fix(opencode): discover models on toggle when registry is empty (#286)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-28T15:55:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0874bcd48d606493a4ffc81894be1ca2bf4de1e8",
          "body": "* feat(qoder): migrate to api2-v2 OpenAI-compatible endpoint\n\n* fix(qoder): address autoreview findings for api2-v2 migration\n\n- Redact access tokens from all logs and error messages in stream.ts\n- Stop including request bodies in thrown errors\n- Always send max_tokens when resolved (>0) to fix 3276\n[…]\np startup/session behavior static while api2-v2 lacks a model-list endpoint\n- Expand Qoder model/stream tests for classification and failure paths\n\n---------\n\nCo-authored-by: Pi Agent <agent@pi.local>",
          "is_bot": false,
          "headline": "feat(qoder): migrate to api2-v2 OpenAI-compatible endpoint (#285)",
          "author_name": "Alaa",
          "author_login": "srcKod",
          "committed_at": "2026-06-28T15:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "838338fe8bd76fe6b765f9c94e635d91e1a7d9c2",
          "body": "Co-authored-by: Pi Agent <agent@pi.local>",
          "is_bot": false,
          "headline": "chore(security): harden release workflow and backfill script PATH (#284)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-27T06:36:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8065e323192583be9faab62837bcc0505f8d637",
          "body": "- Add Kilo and Cline API key authentication\n- Add OpenModel AI provider\n- Remove broken AgentRouter and Naraya providers\n- Fix OpenModel 404 route not found\n- Add curated release notes extraction (scripts/changelog-extract.mjs)\n- Add release notes backfill script (scripts/backfill-github-releases.mjs)\n- Update release workflow to post CHANGELOG summary as release body\n\nCo-authored-by: Pi Agent <agent@pi.local>",
          "is_bot": false,
          "headline": "chore(release): 2.2.4 (#283)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-27T06:27:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e544decaf34f466497dcb5e0cbb440fb56df8118",
          "body": "* feat: add API key auth support for Kilo and Cline providers\n\n- config.ts: add kilo_api_key, cline_api_key fields + getters\n- kilo.ts: use KILO_API_KEY for model fetch and provider registration;\n  conditional OAuth (skipped when key present)\n- cline.ts: use CLINE_API_KEY for auth; remove workos: pr\n[…]\n_key\n\n* test: update mocks for Kilo/Cline API key getters\n\n* refactor(kilo): simplify hasKiloKey check\\ntest(kilo,cline): cover API-key auth paths\n\n---------\n\nCo-authored-by: Pi Agent <agent@pi.local>",
          "is_bot": false,
          "headline": "feat: add API key auth support for Kilo and Cline providers (#282)",
          "author_name": "Alaa",
          "author_login": "srcKod",
          "committed_at": "2026-06-27T06:09:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6e8874a3e36fca8f38a3ba9d3e6b734c351f63d4",
          "body": "…eck (#281)\n\n- Extract refreshModels() helper to eliminate triple-copy of model\n  fetch/filter/re-register logic (was repeated in login, startup,\n  and session_start handlers)\n- Add startup auth check: if user already has valid credentials and\n  cache is stale, refresh models immediately (don't wait for\n  session_start which may skip if cache is fresh)\n- Only hit the network when cache is stale (mirrors kilo/cline pattern)",
          "is_bot": false,
          "headline": "refactor(qoder): deduplicate model refresh logic, add startup auth ch…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-25T19:30:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd08f0a9cd4eb994167b9d4cfb809f83d59feac1",
          "body": "Qoder models were registered once at startup and never updated after\nlogin. The provider now calls pi.registerProvider again after:\n- OAuth login completes (fetches dynamic model list from API)\n- session_start when cache is stale (>1h old)\n\nAlso integrates qoder into the global toggle system so it participates\nin /toggle-free. Models are enhanced with Coding Index scores.",
          "is_bot": false,
          "headline": "fix(qoder): re-register models after login and on cache refresh (#280)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-25T19:06:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f373c0b91c9055968f1679280ceb8f3f9d60412",
          "body": "…ter (#279)\n\nMiniMax-M3 is no longer a guaranteed free promotional model. Known-free\ndetection now relies solely on :free name suffix which catches any\nfuture promotional additions dynamically.",
          "is_bot": false,
          "headline": "fix: remove MiniMax-M3 as hardcoded free model from b.ai and tokenrou…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-25T16:36:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1b6883a742304c09c2289d08c223ccf3a1dd148",
          "body": "- Slim README from 570 to ~100 lines with links to docs/\n- docs/providers.md — full provider catalog and auth setup\n- docs/commands.md — slash commands reference\n- docs/configuration.md — config file, env vars, logging\n- docs/features.md — free detection, CI scores, probing deep dive\n- CONTRIBUTING.md — step-by-step provider addition guide",
          "is_bot": false,
          "headline": "docs: restructure — lean README, docs/ folder, contributing guide (#277)",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-25T14:50:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a59a1b97c3c1dbbd519836243d41fbd64e46b294",
          "body": "…2.6, MiniMax M3 via reverse-engineered CLI protocol (#276)\n\n* feat: add Qoder provider — free DeepSeek V4, Qwen3.7, GLM 5.1, Kimi K2.6, MiniMax M3 via reverse-engineered CLI protocol\n\nAdds a new qoder provider offering completely free access to top-tier models\nthrough Qoder's proprietary API. This \n[…]\nptions object\n- Fix negated condition in thinking-parser (swap if/else branches)\n- Replace !! with Boolean() in stream.ts and models.ts\n- Replace union type inline with BodyInput type alias in cosy.ts",
          "is_bot": false,
          "headline": "feat: add Qoder provider — free DeepSeek V4, Qwen3.7, GLM 5.1, Kimi K…",
          "author_name": "Apostolos Mantzaris",
          "author_login": "apmantza",
          "committed_at": "2026-06-25T13:53:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d43356099e7390ee3a66807cf455bf40f654b7b6",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/so\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(ci): bump softprops/action-gh-release from 3.0.0 to 3.0.1 (#272)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T12:06:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "370387e5b52353bf7a33efd41068c6390a9a72cf",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(ci): bump actions/checkout from 6 to 7 (#273)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T12:06:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 9,
      "commits_last_year": 590,
      "latest_release_at": "2026-07-21T11:43:02Z",
      "latest_release_tag": "v2.2.8",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 19,
      "days_since_latest_release": 3,
      "mean_days_between_releases": 4.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "pi-free",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "pi-package",
            "pi-extension",
            "free-models",
            "paid-models",
            "model-filter",
            "nvidia-nim",
            "kilo",
            "cline",
            "zenmux",
            "crofai",
            "ollama-cloud"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/pi-free",
          "is_deprecated": false,
          "latest_version": "2.2.8",
          "repository_url": "https://github.com/apmantza/pi-free",
          "versions_count": 36,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2742,
          "first_published_at": "2026-04-02T21:49:00.533000Z",
          "latest_published_at": "2026-07-19T07:58:00.095000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 12,
      "stars": 80,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-03-29",
            "count": 1
          },
          {
            "date": "2026-04-19",
            "count": 1
          },
          {
            "date": "2026-05-03",
            "count": 1
          },
          {
            "date": "2026-05-31",
            "count": 1
          },
          {
            "date": "2026-06-01",
            "count": 2
          },
          {
            "date": "2026-06-02",
            "count": 1
          },
          {
            "date": "2026-06-26",
            "count": 1
          },
          {
            "date": "2026-07-07",
            "count": 1
          },
          {
            "date": "2026-07-15",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 1
          },
          {
            "date": "2026-07-24",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 12,
        "total_forks": 12
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 43103,
      "source_files_sampled": 103,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "agents.md"
      ],
      "agent_instruction_max_bytes": 14680
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.7",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh99-v99m-4gvg"
            ],
            "fixed_version": "5.0.8",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 304,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@anthropic-ai/sdk",
            "direct": false,
            "version": "0.91.1",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-js",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/supports-web-crypto",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/util",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-bedrock-runtime",
            "direct": false,
            "version": "3.1048.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/core",
            "direct": false,
            "version": "3.974.11",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/core",
            "direct": false,
            "version": "3.975.3",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-env",
            "direct": false,
            "version": "3.972.37",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-env",
            "direct": false,
            "version": "3.972.59",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-http",
            "direct": false,
            "version": "3.972.39",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-http",
            "direct": false,
            "version": "3.972.61",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-ini",
            "direct": false,
            "version": "3.972.41",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-ini",
            "direct": false,
            "version": "3.973.4",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-login",
            "direct": false,
            "version": "3.972.41",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-login",
            "direct": false,
            "version": "3.972.66",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-node",
            "direct": false,
            "version": "3.972.42",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-node",
            "direct": false,
            "version": "3.972.70",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-process",
            "direct": false,
            "version": "3.972.37",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-process",
            "direct": false,
            "version": "3.972.59",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-sso",
            "direct": false,
            "version": "3.972.41",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-sso",
            "direct": false,
            "version": "3.973.3",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-web-identity",
            "direct": false,
            "version": "3.972.41",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-web-identity",
            "direct": false,
            "version": "3.972.65",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/eventstream-handler-node",
            "direct": false,
            "version": "3.972.16",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/eventstream-handler-node",
            "direct": false,
            "version": "3.972.29",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-eventstream",
            "direct": false,
            "version": "3.972.12",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-eventstream",
            "direct": false,
            "version": "3.972.24",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-websocket",
            "direct": false,
            "version": "3.972.19",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-websocket",
            "direct": false,
            "version": "3.972.41",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/nested-clients",
            "direct": false,
            "version": "3.997.33",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/nested-clients",
            "direct": false,
            "version": "3.997.9",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/signature-v4-multi-region",
            "direct": false,
            "version": "3.996.27",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/signature-v4-multi-region",
            "direct": false,
            "version": "3.996.41",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/token-providers",
            "direct": false,
            "version": "3.1048.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/token-providers",
            "direct": false,
            "version": "3.1088.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/types",
            "direct": false,
            "version": "3.973.8",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/types",
            "direct": false,
            "version": "3.974.2",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/util-locate-window",
            "direct": false,
            "version": "3.965.5",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/util-locate-window",
            "direct": false,
            "version": "3.965.8",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/xml-builder",
            "direct": false,
            "version": "3.972.24",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/xml-builder",
            "direct": false,
            "version": "3.972.36",
            "ecosystem": "npm"
          },
          {
            "name": "@aws/lambda-invoke-store",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@aws/lambda-invoke-store",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/runtime",
            "direct": false,
            "version": "7.29.2",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/runtime",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@earendil-works/pi-agent-core",
            "direct": false,
            "version": "0.80.10",
            "ecosystem": "npm"
          },
          {
            "name": "@earendil-works/pi-ai",
            "direct": false,
            "version": "0.80.10",
            "ecosystem": "npm"
          },
          {
            "name": "@earendil-works/pi-coding-agent",
            "direct": false,
            "version": "0.80.10",
            "ecosystem": "npm"
          },
          {
            "name": "@earendil-works/pi-tui",
            "direct": false,
            "version": "0.80.10",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@google/genai",
            "direct": false,
            "version": "1.52.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-darwin-arm64",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-darwin-universal",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-darwin-x64",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-linux-arm64-gnu",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-linux-arm64-musl",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-linux-riscv64-gnu",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-linux-x64-gnu",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-linux-x64-musl",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-win32-arm64-msvc",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mariozechner/clipboard-win32-x64-msvc",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@mistralai/mistralai",
            "direct": false,
            "version": "2.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@nodable/entities",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@opentelemetry/api",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@opentelemetry/semantic-conventions",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "npm"
          },
          {
            "name": "@opentelemetry/semantic-conventions",
            "direct": false,
            "version": "1.43.0",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.139.0",
            "ecosystem": "npm"
          },
          {
            "name": "@polka/url",
            "direct": false,
            "version": "1.0.0-next.29",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/aspromise",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/base64",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/codegen",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/eventemitter",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/fetch",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/float",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/path",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/pool",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/utf8",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/utf8",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@silvia-odwyer/photon-node",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/core",
            "direct": false,
            "version": "3.24.3",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/core",
            "direct": false,
            "version": "3.29.6",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/credential-provider-imds",
            "direct": false,
            "version": "4.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/credential-provider-imds",
            "direct": false,
            "version": "4.4.11",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/fetch-http-handler",
            "direct": false,
            "version": "5.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/fetch-http-handler",
            "direct": false,
            "version": "5.6.8",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/is-array-buffer",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/node-http-handler",
            "direct": false,
            "version": "4.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/node-http-handler",
            "direct": false,
            "version": "4.9.8",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/signature-v4",
            "direct": false,
            "version": "5.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/signature-v4",
            "direct": false,
            "version": "5.6.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/types",
            "direct": false,
            "version": "4.14.2",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/types",
            "direct": false,
            "version": "4.16.1",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-buffer-from",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-utf8",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "22.19.19",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "26.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/retry",
            "direct": false,
            "version": "0.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-aix-ppc64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-darwin-arm64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-darwin-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-freebsd-arm64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-freebsd-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-arm",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-arm64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-loong64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-mips64el",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-ppc64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-riscv64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-s390x",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-linux-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-netbsd-arm64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-netbsd-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-openbsd-arm64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-openbsd-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-sunos-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-win32-arm64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript/typescript-win32-x64",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/ui",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "base64-js",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "bignumber.js",
            "direct": false,
            "version": "9.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "bowser",
            "direct": false,
            "version": "2.14.1",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "buffer-equal-constant-time",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "data-uri-to-buffer",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "diff",
            "direct": false,
            "version": "8.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ecdsa-sig-formatter",
            "direct": false,
            "version": "1.0.11",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "extend",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-builder",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-parser",
            "direct": false,
            "version": "5.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fetch-blob",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fflate",
            "direct": false,
            "version": "0.8.3",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "formdata-polyfill",
            "direct": false,
            "version": "4.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "gaxios",
            "direct": false,
            "version": "7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "gaxios",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "gcp-metadata",
            "direct": false,
            "version": "8.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-east-asian-width",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "13.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "google-auth-library",
            "direct": false,
            "version": "10.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "google-auth-library",
            "direct": false,
            "version": "10.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "google-logging-utils",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "highlight.js",
            "direct": false,
            "version": "10.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "hosted-git-info",
            "direct": false,
            "version": "9.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "http-proxy-agent",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "https-proxy-agent",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jiti",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-bigint",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-to-ts",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "jwa",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "jws",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "long",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "marked",
            "direct": false,
            "version": "18.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "minipass",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mrmime",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.16",
            "ecosystem": "npm"
          },
          {
            "name": "node-domexception",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-fetch",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "openai",
            "direct": false,
            "version": "6.26.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-retry",
            "direct": false,
            "version": "4.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "partial-json",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "path-expression-matcher",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.20",
            "ecosystem": "npm"
          },
          {
            "name": "proper-lockfile",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "protobufjs",
            "direct": false,
            "version": "7.6.5",
            "ecosystem": "npm"
          },
          {
            "name": "retry",
            "direct": false,
            "version": "0.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "retry",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "sirv",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strnum",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "totalist",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ts-algebra",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.23.1",
            "ecosystem": "npm"
          },
          {
            "name": "typebox",
            "direct": false,
            "version": "1.1.38",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "undici",
            "direct": false,
            "version": "8.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "web-streams-polyfill",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.21.1",
            "ecosystem": "npm"
          },
          {
            "name": "xml-naming",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "3.25.76",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 304,
        "direct_count": 0,
        "indirect_count": 304
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 294,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 32,
        "closed_unmerged_prs": 15
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "apmantza",
          "commits": 290,
          "avatar_url": "https://avatars.githubusercontent.com/u/247365598?v=4"
        },
        {
          "type": "User",
          "login": "wastedC",
          "commits": 252,
          "avatar_url": "https://avatars.githubusercontent.com/u/917574?v=4"
        },
        {
          "type": "User",
          "login": "srcKod",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/40680002?v=4"
        },
        {
          "type": "User",
          "login": "kuuhaku-00",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/40571328?v=4"
        },
        {
          "type": "User",
          "login": "Faks",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1909645?v=4"
        },
        {
          "type": "User",
          "login": "vskrch",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/24230079?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.529
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml",
        "update-benchmarks.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "12 out of 13 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/13 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6ca913bbdd726e274787b772e4261440c3a24bb7",
        "ran_at": "2026-07-25T04:54:42Z",
        "aggregate_score": 6.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T13:36:07Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-24T13:30:35Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/apmantza/pi-free",
    "host": "github.com",
    "name": "pi-free",
    "owner": "apmantza"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 68,
      "inputs": {
        "security": 70,
        "vitality": 86,
        "community": 55,
        "governance": 58,
        "engineering": 70
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "commits_last_year": 590,
              "human_commit_share": 0.94,
              "days_since_last_push": 0,
              "active_weeks_last_year": 19
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "19/52 weeks with commits",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "590 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 590
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 9,
              "latest_release_tag": "v2.2.8",
              "releases_from_tags": false,
              "days_since_latest_release": 3,
              "mean_days_between_releases": 4.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "9 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~4.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 4.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 55,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "forks": 12,
              "stars": 80,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "80 stars",
                "points": 30.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 80
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "12 forks",
                "points": 8.7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "pi-free"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2742
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,742 downloads/month across npm",
                "points": 45.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2742,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.529
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 53% of commits",
                "points": 10.6,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 53
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 83,
            "inputs": {
              "merged_prs": 294,
              "open_issues": 0,
              "closed_issues": 32,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 15
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "294/309 decided PRs merged",
                "points": 36.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 294,
                      "decided": 309
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 34,
            "inputs": {
              "followers": 10,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "apmantza",
              "public_repos": 12,
              "account_age_days": 234
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "10 followers of apmantza",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 10,
                      "login": "apmantza"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~0 yr old",
                "points": 9.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "pi-free"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "36 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 70,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 13 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 70,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 13 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 304 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 304
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 304,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 304,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 80,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.989,
              "agent_instruction_files": [
                "agents.md"
              ],
              "agent_instruction_max_bytes": 14680
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "agents.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "agents.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "93 of 94 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 93,
                      "sampled": 94
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.15,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.06
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "15 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 15,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "6 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 43103,
              "source_files_sampled": 103,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/103 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 103,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T04:54:58.954407Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/apmantza/pi-free.svg",
  "full_name": "apmantza/pi-free",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistikennpm.