Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.
askalf/deepdive erreicht einen Gesundheitsindex von 69 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Security (86/100) ab, am schwächsten bei Community & Adoption (45/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
69
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
69
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Keine offenen Advisories — kein Advisory ist länger als 90 Tage öffentlich
Verwendete Eingangsdaten
source
osv
advisories
1
affected_packages
1
assessed_packages
111
unassessed_packages
0
affected_by_severity
moderate 1
direct_affected_packages
0
Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:@askalf/deepdive@0.32.0 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 111 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 2 ⇿
0Sterne
2Forks
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
OpenSSF Scorecard 8.5 / 10
8.5Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-27 00:59 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 3 direkte und 238 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
npm
@modelcontextprotocol/sdk
1.29.0
direkt
npm
playwright
1.61.1
direkt
npm
zod
4.4.3
direkt
npm
@babel/code-frame
7.29.7
indirekt
npm
@babel/compat-data
7.29.7
indirekt
npm
@babel/core
7.29.7
indirekt
npm
@babel/generator
7.29.7
indirekt
npm
@babel/helper-compilation-targets
7.29.7
indirekt
npm
@babel/helper-globals
7.29.7
indirekt
npm
@babel/helper-module-imports
7.29.7
indirekt
npm
@babel/helper-module-transforms
7.29.7
indirekt
npm
@babel/helper-string-parser
7.29.7
indirekt
npm
@babel/helper-validator-identifier
7.29.7
indirekt
npm
@babel/helper-validator-option
7.29.7
indirekt
npm
@babel/helpers
7.29.7
indirekt
npm
@babel/parser
7.29.7
indirekt
npm
@babel/template
7.29.7
indirekt
npm
@babel/traverse
7.29.7
indirekt
npm
@babel/types
7.29.7
indirekt
npm
@esbuild/aix-ppc64
0.28.1
indirekt
npm
@esbuild/android-arm
0.28.1
indirekt
npm
@esbuild/android-arm64
0.28.1
indirekt
npm
@esbuild/android-x64
0.28.1
indirekt
npm
@esbuild/darwin-arm64
0.28.1
indirekt
npm
@esbuild/darwin-x64
0.28.1
indirekt
npm
@esbuild/freebsd-arm64
0.28.1
indirekt
npm
@esbuild/freebsd-x64
0.28.1
indirekt
npm
@esbuild/linux-arm
0.28.1
indirekt
npm
@esbuild/linux-arm64
0.28.1
indirekt
npm
@esbuild/linux-ia32
0.28.1
indirekt
npm
@esbuild/linux-loong64
0.28.1
indirekt
npm
@esbuild/linux-mips64el
0.28.1
indirekt
npm
@esbuild/linux-ppc64
0.28.1
indirekt
npm
@esbuild/linux-riscv64
0.28.1
indirekt
npm
@esbuild/linux-s390x
0.28.1
indirekt
npm
@esbuild/linux-x64
0.28.1
indirekt
npm
@esbuild/netbsd-arm64
0.28.1
indirekt
npm
@esbuild/netbsd-x64
0.28.1
indirekt
npm
@esbuild/openbsd-arm64
0.28.1
indirekt
npm
@esbuild/openbsd-x64
0.28.1
indirekt
npm
@esbuild/openharmony-arm64
0.28.1
indirekt
npm
@esbuild/sunos-x64
0.28.1
indirekt
npm
@esbuild/win32-arm64
0.28.1
indirekt
npm
@esbuild/win32-ia32
0.28.1
indirekt
npm
@esbuild/win32-x64
0.28.1
indirekt
npm
@hono/node-server
1.19.15
indirekt
npm
@isaacs/fs-minipass
4.0.1
indirekt
npm
@istanbuljs/schema
0.1.6
indirekt
npm
@jazzer.js/bug-detectors
4.0.0
indirekt
npm
@jazzer.js/core
4.0.0
indirekt
npm
@jazzer.js/fuzzer
4.0.0
indirekt
npm
@jazzer.js/hooking
4.0.0
indirekt
npm
@jazzer.js/instrumentor
4.0.0
indirekt
npm
@jridgewell/gen-mapping
0.3.13
indirekt
npm
@jridgewell/remapping
2.3.5
indirekt
npm
@jridgewell/resolve-uri
3.1.2
indirekt
npm
@jridgewell/sourcemap-codec
1.5.5
indirekt
npm
@jridgewell/trace-mapping
0.3.31
indirekt
npm
@napi-rs/canvas
1.0.0
indirekt
npm
@napi-rs/canvas-android-arm64
1.0.0
indirekt
npm
@napi-rs/canvas-darwin-arm64
1.0.0
indirekt
npm
@napi-rs/canvas-darwin-x64
1.0.0
indirekt
npm
@napi-rs/canvas-linux-arm-gnueabihf
1.0.0
indirekt
npm
@napi-rs/canvas-linux-arm64-gnu
1.0.0
indirekt
npm
@napi-rs/canvas-linux-arm64-musl
1.0.0
indirekt
npm
@napi-rs/canvas-linux-riscv64-gnu
1.0.0
indirekt
npm
@napi-rs/canvas-linux-x64-gnu
1.0.0
indirekt
npm
@napi-rs/canvas-linux-x64-musl
1.0.0
indirekt
npm
@napi-rs/canvas-win32-arm64-msvc
1.0.0
indirekt
npm
@napi-rs/canvas-win32-x64-msvc
1.0.0
indirekt
npm
@types/node
26.1.1
indirekt
npm
accepts
2.0.0
indirekt
npm
ajv
8.20.0
indirekt
npm
ajv-formats
3.0.1
indirekt
npm
ansi-regex
5.0.1
indirekt
npm
ansi-styles
4.3.0
indirekt
npm
append-transform
2.0.0
indirekt
npm
baseline-browser-mapping
2.10.43
indirekt
npm
bindings
1.5.0
indirekt
npm
body-parser
2.3.0
indirekt
npm
browserslist
4.28.6
indirekt
npm
buffer-from
1.1.2
indirekt
npm
bytes
3.1.2
indirekt
npm
call-bind-apply-helpers
1.0.2
indirekt
npm
call-bound
1.0.4
indirekt
npm
caniuse-lite
1.0.30001805
indirekt
npm
chownr
3.0.0
indirekt
npm
cliui
8.0.1
indirekt
npm
cmake-js
8.0.0
indirekt
npm
color-convert
2.0.1
indirekt
npm
color-name
1.1.4
indirekt
npm
content-disposition
1.1.0
indirekt
npm
content-type
1.0.5
indirekt
npm
content-type
2.0.0
indirekt
npm
convert-source-map
2.0.0
indirekt
npm
cookie
0.7.2
indirekt
npm
cookie-signature
1.2.2
indirekt
npm
cors
2.8.6
indirekt
npm
cross-spawn
7.0.6
indirekt
npm
debug
4.4.3
indirekt
npm
deep-extend
0.6.0
indirekt
npm
default-require-extensions
3.0.1
indirekt
npm
depd
2.0.0
indirekt
npm
dunder-proto
1.0.1
indirekt
npm
ee-first
1.1.1
indirekt
npm
electron-to-chromium
1.5.389
indirekt
npm
emoji-regex
8.0.0
indirekt
npm
encodeurl
2.0.0
indirekt
npm
es-define-property
1.0.1
indirekt
npm
es-errors
1.3.0
indirekt
npm
es-object-atoms
1.1.2
indirekt
npm
esbuild
0.28.1
indirekt
npm
escalade
3.2.0
indirekt
npm
escape-html
1.0.3
indirekt
npm
etag
1.8.1
indirekt
npm
eventsource
3.0.7
indirekt
npm
eventsource-parser
3.1.0
indirekt
npm
express
5.2.1
indirekt
npm
express-rate-limit
8.5.2
indirekt
npm
fast-deep-equal
3.1.3
indirekt
npm
fast-uri
3.1.4
indirekt
npm
file-uri-to-path
1.0.0
indirekt
npm
finalhandler
2.1.1
indirekt
npm
forwarded
0.2.0
indirekt
npm
fresh
2.0.0
indirekt
npm
fs-extra
11.3.6
indirekt
npm
fsevents
2.3.2
indirekt
npm
fsevents
2.3.3
indirekt
npm
function-bind
1.1.2
indirekt
npm
gensync
1.0.0-beta.2
indirekt
npm
get-caller-file
2.0.5
indirekt
npm
get-intrinsic
1.3.0
indirekt
npm
get-proto
1.0.1
indirekt
npm
gopd
1.2.0
indirekt
npm
graceful-fs
4.2.11
indirekt
npm
has-flag
4.0.0
indirekt
npm
has-symbols
1.1.0
indirekt
npm
hasown
2.0.4
indirekt
npm
hono
4.12.29
indirekt
npm
html-escaper
2.0.2
indirekt
npm
http-errors
2.0.1
indirekt
npm
iconv-lite
0.7.3
indirekt
npm
inherits
2.0.4
indirekt
npm
ini
1.3.8
indirekt
npm
ip-address
10.2.0
indirekt
npm
ipaddr.js
1.9.1
indirekt
npm
is-fullwidth-code-point
3.0.0
indirekt
npm
is-promise
4.0.0
indirekt
npm
isexe
2.0.0
indirekt
npm
isexe
4.0.0
indirekt
npm
istanbul-lib-coverage
3.2.2
indirekt
npm
istanbul-lib-hook
3.0.0
indirekt
npm
istanbul-lib-instrument
6.0.3
indirekt
npm
istanbul-lib-report
3.0.1
indirekt
npm
istanbul-reports
3.2.0
indirekt
npm
jose
6.2.3
indirekt
npm
js-tokens
4.0.0
indirekt
npm
jsesc
3.1.0
indirekt
npm
json-schema-traverse
1.0.0
indirekt
npm
json-schema-typed
8.0.2
indirekt
npm
json5
2.2.3
indirekt
npm
jsonfile
6.2.1
indirekt
npm
lru-cache
5.1.1
indirekt
npm
make-dir
4.0.0
indirekt
npm
math-intrinsics
1.1.0
indirekt
npm
media-typer
1.1.0
indirekt
npm
merge-descriptors
2.0.0
indirekt
npm
mime-db
1.54.0
indirekt
npm
mime-types
3.0.2
indirekt
npm
minimist
1.2.8
indirekt
npm
minipass
7.1.3
indirekt
npm
minizlib
3.1.0
indirekt
npm
ms
2.1.3
indirekt
npm
negotiator
1.0.0
indirekt
npm
node-addon-api
8.9.0
indirekt
npm
node-api-headers
1.9.0
indirekt
npm
node-releases
2.0.51
indirekt
npm
object-assign
4.1.1
indirekt
npm
object-inspect
1.13.4
indirekt
npm
on-finished
2.4.1
indirekt
npm
once
1.4.0
indirekt
npm
parseurl
1.3.3
indirekt
npm
path-key
3.1.1
indirekt
npm
path-to-regexp
8.4.2
indirekt
npm
pdfjs-dist
6.1.200
indirekt
npm
picocolors
1.1.1
indirekt
npm
pkce-challenge
5.0.1
indirekt
npm
playwright-core
1.61.1
indirekt
npm
proper-lockfile
4.1.2
indirekt
npm
proxy-addr
2.0.7
indirekt
npm
qs
6.15.3
indirekt
npm
range-parser
1.3.0
indirekt
npm
raw-body
3.0.2
indirekt
npm
rc
1.2.8
indirekt
npm
require-directory
2.1.1
indirekt
npm
require-from-string
2.0.2
indirekt
npm
retry
0.12.0
indirekt
npm
router
2.2.0
indirekt
npm
safer-buffer
2.1.2
indirekt
npm
semver
6.3.1
indirekt
npm
semver
7.8.5
indirekt
npm
send
1.2.1
indirekt
npm
serve-static
2.2.1
indirekt
npm
setprototypeof
1.2.0
indirekt
npm
shebang-command
2.0.0
indirekt
npm
shebang-regex
3.0.0
indirekt
npm
side-channel
1.1.1
indirekt
npm
side-channel-list
1.0.1
indirekt
npm
side-channel-map
1.0.1
indirekt
npm
side-channel-weakmap
1.0.2
indirekt
npm
signal-exit
3.0.7
indirekt
npm
source-map
0.6.1
indirekt
npm
source-map-support
0.5.21
indirekt
npm
statuses
2.0.2
indirekt
npm
string-width
4.2.3
indirekt
npm
strip-ansi
6.0.1
indirekt
npm
strip-bom
4.0.0
indirekt
npm
strip-json-comments
2.0.1
indirekt
npm
supports-color
7.2.0
indirekt
npm
tar
7.5.22
indirekt
npm
tmp
0.2.7
indirekt
npm
toidentifier
1.0.1
indirekt
npm
tsx
4.23.1
indirekt
npm
type-is
2.1.0
indirekt
npm
typescript
5.9.3
indirekt
npm
undici-types
8.3.0
indirekt
npm
universalify
2.0.1
indirekt
npm
unpipe
1.0.0
indirekt
npm
update-browserslist-db
1.2.3
indirekt
npm
url-join
4.0.1
indirekt
npm
vary
1.1.2
indirekt
npm
which
2.0.2
indirekt
npm
which
6.0.1
indirekt
npm
wrap-ansi
7.0.0
indirekt
npm
wrappy
1.0.2
indirekt
npm
y18n
5.0.8
indirekt
npm
yallist
3.1.1
indirekt
npm
yallist
5.0.0
indirekt
npm
yargs
17.7.3
indirekt
npm
yargs-parser
21.1.1
indirekt
npm
zod-to-json-schema
3.25.2
indirekt
Abhängigkeits-Advisories 1
Die Installation von npm:@askalf/deepdive@0.32.0 zieht 111 Pakete nach sich, direkt und transitiv: 1 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Paket
Version
Beziehung
Schweregrad
Advisories
Behoben in
@hono/node-server
1.19.15
indirekt
mittel
1
2.0.5
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"ai",
"cli",
"llm",
"research-agent",
"search",
"anthropic",
"citations",
"claude",
"deep-research",
"perplexity-alternative",
"self-hosted",
"mcp",
"model-context-protocol"
],
"is_fork": false,
"size_kb": 1006,
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/@askalf/deepdive",
"languages": {
"Shell": 964,
"Dockerfile": 572,
"JavaScript": 530455,
"TypeScript": 370258
},
"pushed_at": "2026-07-26T17:47:46Z",
"created_at": "2026-04-22T00:13:43Z",
"owner_type": "User",
"updated_at": "2026-07-26T17:03:53Z",
"description": "Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "https://sprayberrylabs.com",
"name": "Thomas Sprayberry",
"type": "User",
"login": "askalf",
"company": "Sprayberry Labs",
"location": null,
"followers": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/263217947?v=4",
"created_at": "2026-02-22T19:05:23Z",
"is_verified": null,
"public_repos": 23,
"account_age_days": 154
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2026-07-20T14:48:57Z"
},
{
"tag": "v0.31.1",
"kind": "patch",
"published_at": "2026-07-12T14:03:08Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2026-07-11T15:07:06Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2026-07-11T13:37:56Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2026-07-11T12:53:01Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2026-07-02T23:44:05Z"
},
{
"tag": "v0.27.1",
"kind": "patch",
"published_at": "2026-07-02T22:50:17Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2026-07-02T01:30:47Z"
},
{
"tag": "v0.26.1",
"kind": "patch",
"published_at": "2026-06-27T02:02:06Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2026-06-18T21:56:49Z"
},
{
"tag": "v0.25.3",
"kind": "patch",
"published_at": "2026-06-15T19:10:23Z"
},
{
"tag": "v0.25.2",
"kind": "patch",
"published_at": "2026-06-15T18:23:35Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2026-06-12T21:24:38Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-06-12T18:04:31Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-06-12T15:19:16Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-06-12T10:32:44Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-06-12T01:19:15Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-06-12T01:07:12Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-06-12T00:19:07Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-06-10T01:07:13Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-06-09T21:42:58Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-06-09T19:58:33Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-06-09T18:39:37Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-06-09T18:23:54Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-06-09T17:48:15Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2026-06-04T18:23:34Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2026-06-04T17:23:34Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-05-28T16:13:30Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-05-18T14:51:28Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-05-18T14:24:32Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-05-18T14:05:22Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-05-07T18:59:58Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-05-07T18:22:47Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-05-06T20:19:32Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-05-05T21:48:08Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-05T21:08:32Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-05-02T00:59:46Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-04-23T23:04:01Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-04-22T16:10:59Z"
}
],
"recent_commits": [
{
"oid": "4a13089fe289c7adf72ad79c0fe7aa744e1731da",
"body": "…ory (#185)\n\nClears the two vulnerabilities behind Scorecard alert #36 (Vulnerabilities\ncheck, score 8). Both are transitive and both fixes are in-range, so this is a\nlockfile-only bump with no manifest change.\n\ntar 7.5.20 -> 7.5.22 (GHSA-r292-9mhp-454m, moderate)\n Uncontrolled recursion in mapHas/\n[…]\nk 1.24.3,\n which is a regression rather than a fix.\n\nVerified: npm ci clean, tsc --noEmit clean, 854 tests pass (2 skipped),\nnpm audit reports tar resolved and only the stale hono advisory remaining.",
"is_bot": false,
"headline": "fix(deps): patch tar and @hono/node-server; document stale hono advis…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-26T17:03:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1b75d6cf9906ea46bac5e56791084d85579bb13e",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.3 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump fast-uri from 3.1.3 to 3.1.4 (#184)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T16:46:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "542a106a24c462b2779edbfb563418935c3cb658",
"body": null,
"is_bot": false,
"headline": "release: v0.32.0 (#183)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-20T14:48:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7ac0c65b62aa11d53bb663a4a7310b1435e805d",
"body": "Fresh installs resolve config to $XDG_CONFIG_HOME/deepdive/config.json,\nthe page cache to $XDG_CACHE_HOME/deepdive, and sessions to\n$XDG_STATE_HOME/deepdive/sessions. An existing legacy ~/.deepdive/\nkeeps winning for all three paths, and the DEEPDIVE_CONFIG /\nDEEPDIVE_CACHE_DIR / DEEPDIVE_SESSIONS_D\n[…]\nare ignored per the spec.\n\nResolution is centralized in src/xdg.ts with an injectable legacy-dir\ncheck; test/xdg.test.mjs pins the precedence matrix. Help text, README,\nand CHANGELOG updated to match.",
"is_bot": false,
"headline": "feat: XDG Base Directory layout for fresh installs (#179) (#182)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-20T14:35:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd3e05391849ce0859b7856cc437a2b8e4706cd7",
"body": "Bumps the non-major group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init`\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump the non-major group with 3 updates (#180)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T11:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "515086f920eb9071e30683df1dbe16813da44087",
"body": "Bumps oss-fuzz-base/base-builder-javascript from `0d2d180` to `61d74ab`.\n\n---\nupdated-dependencies:\n- dependency-name: oss-fuzz-base/base-builder-javascript\n dependency-version: 61d74ab736764e98c8e7017dafd8bdd1129f004177dc38eec08bdbb3dd3ea7d8\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump oss-fuzz-base/base-builder-javascript (#181)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T09:52:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ecc59ca8647fc612de44aaea8458d9def71c9f8",
"body": null,
"is_bot": false,
"headline": "docs: point OpenSSF Scorecard badge at api.scorecard.dev (#178)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-19T13:18:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58aa0d1e54eed7eb9e8d9ddc2606a8307f91859f",
"body": "…p (#176)\n\nBumps the non-major group with 1 update: [tsx](https://github.com/privatenumber/tsx).\n\n\nUpdates `tsx` from 4.23.0 to 4.23.1\n- [Release notes](https://github.com/privatenumber/tsx/releases)\n- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)\n- [Commits](https\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump tsx from 4.23.0 to 4.23.1 in the non-major grou…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T22:27:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10379fe981b4e52a96e9b17eb1683656428242fd",
"body": "Bumps oss-fuzz-base/base-builder-javascript from `5d38358` to `0d2d180`.\n\n---\nupdated-dependencies:\n- dependency-name: oss-fuzz-base/base-builder-javascript\n dependency-version: 0d2d18019500c5b4b00c3edb37a5a3b8291fd9b43a19932a3dabb75e3f66f64d\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump oss-fuzz-base/base-builder-javascript (#177)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T22:24:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "751aae3525211176dce74e104b2f84a484958c46",
"body": "Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3.\n- [Release notes](https://github.com/colinhacks/zod/releases)\n- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: zod\n dependency-version: 4.4.3\n dependency-type\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump zod from 3.25.76 to 4.4.3 (#173)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T19:07:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8ad78577ea820e587613ef354d8a639e71d78ab1",
"body": "Bumps the non-major group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `@types/node` from 26.1.0 to 26.1.1\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump @types/node in the non-major group (#172)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T17:37:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ccad3753913c6e44c3181c839113dfbc0a782ee1",
"body": "Bumps the non-major group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [actions/stale](https://github.com/ac\n[…]\n: version-update:semver-minor\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump the non-major group with 4 updates (#175)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T15:07:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69d159bfa083f7a8dad33460d15e4ba877e97ca0",
"body": "…ild (#171)",
"is_bot": false,
"headline": "harden: digest-pin the ClusterFuzzLite base image + npm ci in fuzz bu…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-12T14:10:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2683728e7f6777a540cdfe7df3f7faa6aaf25ff9",
"body": "…ns (v0.31.1) (#170)",
"is_bot": false,
"headline": "harden: ClusterFuzzLite fuzzing + job-scoped workflow write permissio…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-12T14:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd0df92f8849174268d4836a2b96603bb80b098d",
"body": null,
"is_bot": false,
"headline": "docs(readme): add the OpenSSF Scorecard badge (#167)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15a2ce8af50c066832efe476d51775b65114cec5",
"body": "* docs: add Contributor Covenant Code of Conduct\n\n* docs: add contributing guide",
"is_bot": false,
"headline": "docs: add CONTRIBUTING guide and code of conduct (#169)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:57:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e5e4173597a6ccf17d603221e69db47914b47b5",
"body": null,
"is_bot": false,
"headline": "harden: scope release token out of npm test (#168)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:44:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a28f59a3437d57daae814bffc324f40daa996a4",
"body": "…ublished results) (#166)",
"is_bot": false,
"headline": "ci(scorecard): wire the OpenSSF Scorecard action (weekly + on-push, p…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d5abb5a16fa065320037064a412268fb39a6fe7",
"body": "…gned-Releases) (#165)",
"is_bot": false,
"headline": "ci(release): attach npm tarball + Sigstore provenance to releases (Si…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:02:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38541b92d3ad2a96cf378839cb401a177dc00ba2",
"body": "… canary-data branch) (#164)",
"is_bot": false,
"headline": "docs(README): link the nightly public report card (canary dashboard +…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T21:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97f4059a54f336b003ece7cdd423d1ce2b030522",
"body": "… paths (#163)\n\nOperator configured a trusted publisher for @askalf/deepdive on npmjs,\nbound (per fleet convention) to the publish.yml filename. This moves the\npackage to the fleet's proven tokenless pattern and fixes the three\nworkflow defects found in today's review:\n\n- publish.yml becomes THE pub\n[…]\norts on the existing tag).\n\nPost-merge: verify the OIDC path (dispatch publish.yml for v0.31.0 —\nexpect the version-conflict error AFTER a successful tokenless auth),\nthen revoke the NPM_TOKEN secret.",
"is_bot": false,
"headline": "ci: migrate npm publish to OIDC trusted publishing + fix the recovery…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T15:51:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be904c318d93837190d1bfadc7165683ae2723b9",
"body": null,
"is_bot": false,
"headline": "release: 0.31.0 — MCP server mode (#162)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T15:06:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2778b4ecb751f19cbcfe406bc7170eac6a6ff99",
"body": "…ed (#160) (#161)\n\n`deepdive mcp` runs a Model Context Protocol server on stdio exposing one\ntool, deepdive_research: any MCP client (Claude Code, IDEs, agent\nharnesses) gets a research tool whose every answer arrives with the trust\nsignals the CLI reports — source-trust mix, citations supported,\nco\n[…]\ncp.test.mjs: protocol-level via InMemoryTransport + injected\nrunner, flag mapping, footer, schema rejection, error rendering, and a\nreal-stdio smoke spawning `deepdive mcp`. Suite: 845/0.\n\nCloses #160",
"is_bot": false,
"headline": "mcp: server mode — deepdive_research over stdio, trust signals attach…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T15:00:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50049d2f4fc120ac0883a6c41a1447ccd4b96c28",
"body": null,
"is_bot": false,
"headline": "release: 0.30.0 — #157 adapter-aware site: hint (#159)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T13:37:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5242d19eca7c21121af67b4c27a0fb537af45a3b",
"body": "…irective (#157) (#158)\n\nv0.29.0's live receipt: hinted retries fired ×3 and still surfaced zero\nallowed-host results — a bare host token can't steer an aggregator's\nranking, and two of the runner fan-out's three backends can't respond to a\nhost hint at all.\n\n- New optional SearchAdapter.searchHinte\n[…]\nlpubs.nist.gov →\n also nvlpubs) — the form the original 7/2 probe ranked #1 with.\n\n839 tests / 0 fail (11 new). Receipt protocol unchanged: NIST Q ×3 on the\nrunner, target 3/3 (was 1/3).\n\nCloses #157",
"is_bot": false,
"headline": "search: adapter-aware site: hint — the allow-domain retry becomes a d…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T13:25:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a168e1a343d683ba1593c681739f2f3b6276c3e",
"body": "…k/host cap (#156)",
"is_bot": false,
"headline": "release: 0.29.0 — #147 allow-domain recovery + #148 relevance tiebrea…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T12:52:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6de1395517ca2f7c90cc724be1f94105ec682c6",
"body": "…cap + bench canonical column (#148) (#155)\n\n* keep-stage: relevance tiebreak in uniform-tier pools + per-host slot cap + bench canonical column (#148)\n\nAuthority ranking orders by WHO published; once a pool is uniformly\ntrustworthy it stops discriminating exactly where it is the only axis left,\nand\n[…]\n column. Reported,\n never gated — the measurement instrument for this change.\n\nAddresses #148\n\n* bench: #148 receipt boards — academic + niche-ops authority-compare w/ canonical column (branch build)",
"is_bot": false,
"headline": "keep-stage: relevance tiebreak in uniform-tier pools + per-host slot …",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T12:47:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ef4eca802be60b1d55c5da6d1007e61cd4e3253",
"body": "…ctural-fallback skip (#147) (#154)\n\n* search: fix the --allow-domain coin flip — hinted retry + honest structural-fallback skip (#147)\n\nLive on v0.27.1, the same question with --allow-domain=nvlpubs.nist.gov ran\nthree times: one answer, two exit 3s — while a raw probe carrying the host\nname found t\n[…]\nin.test.mjs plus canServeAllowedDomain and\nservesDomains-union unit cases.\n\nCloses #147\n\n* test: match the hint host as a query token, not a substring (CodeQL js/incomplete-url-substring-sanitization)",
"is_bot": false,
"headline": "search: fix the --allow-domain coin flip — hinted retry + honest stru…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T12:39:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5825fa3e668694f9402877af7b936ad4fedc904",
"body": "…dpass) (#153)",
"is_bot": false,
"headline": "README: sweep to the renamed tools (redstamp/truecopy/strongroom/fiel…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-10T18:46:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6260d778bdd334e5a8d5a4a32c51dcd68d8edcbd",
"body": null,
"is_bot": false,
"headline": "README: align askalf framing to the operation story (#152)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-10T15:13:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de28096dedd18276e6fbfba9eb8e16f360229420",
"body": "Bumps the non-major group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [tsx](https://github.com/privatenumber/tsx).\n\n\nUpdates `@types/node` from 26.0.1 to 26.1.0\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/release\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump the non-major group with 2 updates (#151)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T17:54:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "113f040cddad7d125cb8f547076f823447092c3f",
"body": "Bumps the non-major group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init`\n[…]\n: version-update:semver-patch\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump the non-major group with 3 updates (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T10:07:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "deed38a7c73b391d3d0058c0a5c42c2209d4131e",
"body": null,
"is_bot": false,
"headline": "release: v0.28.0 (#149)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T23:43:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "379ba8bc9b355be7d341785caa08e07a1b81e01b",
"body": "…nt spans, not the document head (#145) (#146)\n\nHead-first truncation reduced long formal documents to front matter:\nthe first real PDF ingest (129-page NIST SP 800-63B-4) extracted all\n18,265 words, capped to the first 2,000 — title page, authors, abstract,\nToC — and the synth correctly refused to \n[…]\nd head-first cap.\nDeterministic, LLM-free, zero new deps.\n\nPinned by test/relevance-window.test.mjs incl. a NIST-shaped fixture\nasserting head-first misses the normative text and windowing reaches it.",
"is_bot": false,
"headline": "feat: relevance-windowed per-source cap — budget goes to query-releva…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T23:41:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5236f58d67726935010b4b5c11af6a16c036b72f",
"body": null,
"is_bot": false,
"headline": "release: v0.27.1 (#144)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T22:49:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ead8a801543fd0eff367eeb9d4d37acdac6f43be",
"body": "…(#142) (#143)\n\nA live v0.27.0 run grounded 16/18 citations in the official OpenSSH\nrelease notes yet badged `mixed` — openssh.org scored unknown while the\nset's one recognized primary was a marginally relevant Windows install\nguide. Same coverage class as #130: canonical project sites with no\ndocs.\n[…]\nrg — the mirror search actually surfaces — and openbsd.org,\nthe parent project), pinned by a new test case. Re-scoring the live\nrun's five kept sources: 1 primary / 4 unknown -> 3 primary / 2 unknown.",
"is_bot": false,
"headline": "fix: OpenSSH/OpenBSD project hosts score primary in source authority …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T22:46:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9fc1f0c252a7dd89f680828b0d9a1abe8153bf14",
"body": "…4-8) (#141)\n\nREADME + cli usage comment suggested `claude-opus-4-7` for reasoning-heavy runs;\nopus-4-7 is superseded by opus-4-8 (current). Docs/examples only — benchmark\nreceipts, CHANGELOG history, the pricing table, and the still-valid default\nclaude-sonnet-4-6 are untouched.",
"is_bot": false,
"headline": "docs: refresh superseded opus model-id in examples (opus-4-7 -> opus-…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T12:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0062b46844bc811403bde2cc226730e062694fb",
"body": "…onal-dep accuracy (#140)",
"is_bot": false,
"headline": "docs(readme): v0.27.0 state — board receipts, SE keyword ladder, opti…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T12:22:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1a4b31b37597f4da84ea3e48a601cde2d01daf3",
"body": "…shipped empty, not just since 0.20.0 (#139)",
"is_bot": false,
"headline": "docs(test): correct the #135 scope note — all 28 auto-release bodies …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T12:13:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27d4eeecd66797cec8546eb4bc39aea3f2348540",
"body": "…niche-ops un-deaded (+5, trust high) (#138)",
"is_bot": false,
"headline": "bench: source-authority off-vs-prefer board at v0.27.0 — 23% -> 44%, …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T02:44:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a63177369adcf0723b3ab362d1e52e4c87ddefcb",
"body": "… cell (#137)",
"is_bot": false,
"headline": "bench(compare): name the failure when a run renders as an empty board…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T02:26:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d76a25b195412f9a3d94cf9bbee15f646b87129",
"body": "…emptied every release body (#135) (#136)",
"is_bot": false,
"headline": "fix(release): changelog extraction never worked — $ under the m flag …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99b49d3df5b08debdc0684314f433b7a9da0ef76",
"body": "…Exchange keyword ladder (#131) (#134)",
"is_bot": false,
"headline": "chore(release): v0.27.0 — ops/infra authority coverage (#130) + Stack…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:30:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6f829e1949270884073966ae999e729d586043",
"body": "…ero-result NL queries (#131) (#133)",
"is_bot": false,
"headline": "feat(search): stackexchange adapter walks the #86 keyword ladder on z…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:26:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1959f406d16a918301e178eedd2f4d3c7b31327",
"body": "…roject docs + the SE network's own domains (#130) (#132)",
"is_bot": false,
"headline": "feat(source-authority): cover the ops/infra canon — nginx.org-class p…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:24:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97db37c7db2826ffc2ced923a5b7fc95deed0ace",
"body": "… 18% -> 38% primary/reputable (#129)",
"is_bot": false,
"headline": "bench: source-authority off-vs-prefer board at v0.26.1 (P3 of #111) —…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T00:49:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0926292dec3a8fe37f3b1855c8ed8048aea3641",
"body": "…adge entry (#128)",
"is_bot": false,
"headline": "docs(changelog): cut the missing 0.26.1 section + add the #124 HTML-b…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T00:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8716e5f6556ede13bcb857dec5dfb97590b72a5f",
"body": "Bumps the non-major group with 3 updates: [playwright](https://github.com/microsoft/playwright), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [pdfjs-dist](https://github.com/mozilla/pdf.js).\n\n\nUpdates `playwright` from 1.61.0 to 1.61.1\n- [Release notes](\n[…]\n: version-update:semver-minor\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump the non-major group with 3 updates (#127)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-29T10:00:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abfc194d75ddaf18550f0a517b75265ccf210c59",
"body": "…prefix exclusion fix (#125) (#126)",
"is_bot": false,
"headline": "chore(release): v0.26.1 — ship source-trust HTML badge (#124) + docs-…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-27T02:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7c269e7452ede742be71f196644ab21c466b3d7",
"body": "…prefix boost (#111) (#125)\n\ndocs.google.com matched the `docs.` documentation-subdomain boost and scored\n`primary` (top authority, 1.0) — but it's the Google Docs app, where anyone can\npublish a document, not Google's product docs. An arbitrary user-published\nGoogle Doc therefore ranked as authorit\n[…]\nnot boosted). Google's real product docs at\ndevelopers.google.com / cloud.google.com are unaffected (the latter is already\na curated primary domain). Pinned by a new case in source-authority.test.mjs.",
"is_bot": false,
"headline": "fix(source-authority): exclude user-publishable docs. hosts from the …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-26T14:58:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac536dd89bc649a0a6a045d73164ec662c8448f9",
"body": "…) (#124)\n\nThe HTML export now shows deepdive's source-trust label — the orthogonal axis to\ncitation support (whether the sources themselves are credible, not just whether\nclaims are cited) — on the shareable artifact, mirroring the CLI footer and the\n--json envelope. renderTrustBadge reuses the sam\n[…]\nurceTrust the other surfaces use, so every output reports one\nconsistent signal. Only shown when there's something to flag (mixed/low); a\nhigh-trust run stays clean. Tooltip is HTML-escaped. +6 tests.",
"is_bot": false,
"headline": "feat(export): surface the source-trust badge in the HTML report (#111…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-25T01:14:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09944ec40412be7a61bcfe7061e8d65b0110b2d6",
"body": "claude-sync and claude-bridge are being moved back to private. Remove public references/links so nothing 404s. npm packages stay published.",
"is_bot": false,
"headline": "chore: remove claude-sync from stack listing (now private) (#123)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T20:17:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80bb3ea49087ae7379e4d4263d3f8b1063869810",
"body": "The agent repo (@askalf/agent) is being made private and held back until the platform goes live. Remove public references/links so nothing 404s in the meantime. To be re-added at launch.",
"is_bot": false,
"headline": "chore: remove agent from stack listing (held back pre-launch) (#122)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T18:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2548f7ca46c6975c501b18ae3b167d6e1a124a4a",
"body": "…g the run (#104) (#121)\n\ncallLLMStream wrapped only the initial connect in retry, so once the synthesis\nstream was flowing a mid-generation upstream stall tripped the idle-token\ndeadline and the TimeoutError killed the whole run. On a single-pass factual\nlookup synthesis is the only synthesis call,\n[…]\ny.test.mjs covers buffered-stall retry + fresh buffer,\npre-first-token retry, post-first-token no-retry, and a long-but-healthy stream\nthat outlives the connect timeout. Full suite: 760 pass / 0 fail.",
"is_bot": false,
"headline": "fix(synthesize): retry intermittent upstream stalls instead of failin…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T17:20:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bcec93aebf81e706e255121024b10dbd1ea1dca7",
"body": "…letes #111 P4)\n\nCompletes P4 (stretch) of #111 — search-side bias toward primary sources.\n\nThe keep-stage authority ranking can only reorder what search already returned; a `multi:` fan-out could fill its result cap with content farms and truncate a low-ranked primary source before the keep stage s\n[…]\nL().hostname` + `endsWith`), not substring — verified safe. Test assertion changed from `url.includes(...)` to an exact-URL match to clear a CodeQL incomplete-url-substring false positive.\n\nRefs #111.",
"is_bot": false,
"headline": "feat(sources): bias multi-search fan-out toward primary sources (comp…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T16:40:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "affb2a168568d8de05868f25fec2847f0c98eb24",
"body": "…hived)",
"is_bot": false,
"headline": "Remove deja from Own Your Stack list (repo shelved: now private + arc…",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-23T19:25:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d426f8ab53ceac3eb6d99a35353bf5953ecf1eba",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.9.3 to 26.0.0.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-depe\n[…]\ngned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: AskALF <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump @types/node from 25.9.3 to 26.0.0 (#119)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T16:46:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6f0d5f5c6fb8f5069f428090cfd3e227159d68f",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#118)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T10:03:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58a59f52aedd8351036d78bb7edca6c1b330148d",
"body": "…thority feature",
"is_bot": false,
"headline": "readme: add cordon + picket to footer; document the v0.26.0 source-au…",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-19T19:18:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d51b1d52f6d8b8cb30d0049784d64a574236bfb6",
"body": "dist/ is gitignored and `npm test` ran against it without building first, so a\nfresh clone (no dist) — or a stale dist after a src change — failed: fetch-wedge\ncouldn't import FetchWedgeError, source-authority couldn't import its dist module,\nand the llm-stream streaming subtests cancelled (2 files \n[…]\nelled).\nAdd a `pretest` that runs the build. Verified: wipe dist, `npm test` auto-rebuilds\nand 731/733 pass (2 intentional skips).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: build before test so `npm test` works on a fresh checkout (#117)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-19T16:26:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7b7bfdb699f0b3037c3bffe9aa09d29dc9b35e63",
"body": "Wires the measurable axis behind the source-authority work into the bench.\nEvery scoreboard now carries an `authority` column (the kept-source mix the CLI\nreports in --json: NP/NR/NU/NL · trust) plus an aggregate primary/reputable\nshare — reported, never gated (`unknown` is neutral; a niche topic le\n[…]\nlive LLM, like the rest of the harness. Reads the\nreal --json sourceTrust the CLI emits, so the bench stays zero-dep and measures\nthe shipped signal. No src/ changes; manual-only, never wired into CI.",
"is_bot": false,
"headline": "bench: source-authority distribution metric (P3 of #111) (#116)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T22:10:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aaf6eafd40bb5c475ad3924ffba5c26c214bd519",
"body": "Ships the source-authority layer (#112/#113/#114): deterministic, no-LLM\ndomain scoring (scoreAuthority), keep-stage ranking that gives authoritative\nsources the limited fetch slots (--source-authority prefer|strict|off), and a\nsource-trust signal in the footer + --json — orthogonal to citation support,\nso a fully-cited answer built on content farms is flagged instead of silently\nconfident. Version bump + CHANGELOG + README doctor sample only.",
"is_bot": false,
"headline": "release: 0.26.0 — source authority, a second trust axis (#111) (#115)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T21:56:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6ec98a3eff83cafd8fd016043072a23f7b73dea",
"body": "…f #111) (#114)\n\nAdds the orthogonal trust axis to deepdive's output. Citation support asks\n\"does the answer match its cited source?\"; this asks \"are those sources\nthemselves credible?\" — so a fully-cited answer built entirely on content\nfarms is no longer indistinguishable from one grounded in prim\n[…]\nhigh/mixed/low + counts; footer\n with trust). Full suite 739 pass / 0 fail.\n\nNo LLM, deterministic, auditable — same philosophy as the lexical verifier.\nP3 (bench metric) is the remaining #111 slice.",
"is_bot": false,
"headline": "feat(sources): surface a source-trust signal in output + --json (P2 o…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T01:41:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15b645478efa31d7d16d104828fbd675a347012a",
"body": "…(P1 of #111) (#113)\n\nWires the #112 scoreAuthority module — until now a pure, unused export —\ninto the fetch keep-stage so authoritative/primary sources win the limited\nfetch slots ahead of whatever search happened to rank first.\n\n- source-authority.ts: add rankByAuthority(items, urlOf, mode) +\n S\n[…]\ns green (117 pass / 0 fail).\n\nDefault is \"prefer\" per the issue — a reorder-only boost that drops\nnothing, so it cannot starve a query. P2 (trust signal in output/--json)\nand P3 (bench metric) follow.",
"is_bot": false,
"headline": "feat(sources): rank candidates by domain authority at the keep stage …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T01:21:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "26a267776e5f7cabbc57e70d9947dc733864680c",
"body": null,
"is_bot": false,
"headline": "readme: refresh Own Your Stack footer (add hybrid + current stack)",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-16T20:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "953414cf7e9b98b8b381053cf091656bf719e664",
"body": "Pure, deterministic per-URL trust scorer — the foundation for ranking which\nfetched sources to keep and for a source-trust signal distinct from citation\nsupport. Boost-led: gov/edu/standards/academia/official-docs = primary,\nwikipedia/SO/github = reputable; unknown is neutral (niche-but-legit not\npu\n[…]\n conservative seed denylist of observed content farms.\nNot yet wired into the keep loop — next commit. Validated on the 2026-06-15\ndogfood domains: content farms -> low, AWS/Fed/redis docs -> primary.",
"is_bot": false,
"headline": "feat(sources): source-authority scorer (P1 of #111) (#112)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T21:01:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31feaef5b70576063f580a7652cdb3c1edfb13a8",
"body": "…es (#108)\n\nBumps the non-major group with 2 updates in the / directory: [playwright](https://github.com/microsoft/playwright) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `playwright` from 1.60.0 to 1.61.0\n- [Release notes](https://github.com\n[…]\n: version-update:semver-minor\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump the non-major group across 1 directory with 2 updat…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T20:53:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d23cdcdaeed884f171e9c7a247732173cc5d5e3",
"body": "… (#110)\n\nThe installed `deepdive` bin (an npm symlink to dist/cli.js) was a silent\nno-op: the entry-point guard compared process.argv[1] (the symlink path) to\nimport.meta.url (the resolved module path), which never matched, so main()\nnever ran. Resolve both with realpathSync before comparing. Regression test\nspawns the CLI through a symlink. Affected every npm-global install; missed\nbecause the bench/tests invoke node dist/cli.js directly.",
"is_bot": false,
"headline": "fix(cli): run main() under symlink invocation + release 0.25.3 (#109)…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T19:09:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67967f93fbcd3e09990e4518c506b58c88bafef3",
"body": "…107)\n\nShips the synthesis-reliability fix to npm: synthesis always streams (even\nin --json / non-TTY) bounded by an idle-token deadline, so a long generation\ncompletes in one pass and a stalled stream fails fast instead of burning 3x\nwhole-call retries.",
"is_bot": false,
"headline": "release: 0.25.2 — streaming synthesis + idle-token deadline (#106) (#…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T18:22:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92ec973ae34495052cda9aa01b2bfaccb6d3247b",
"body": "…106)\n\nfactual-lookup's synthesis generates a large (~8k-token) answer that takes\n~110-150s. The non-streaming client waits for the whole response under a 120s\nwhole-call timeout, so it intermittently timed out mid-generation and re-ran\nthe full generation 3x (~360s) before failing. That is the #104\n[…]\nwhole-call timeout). A residual intermittent upstream SSE\nstall remains (~1 in 4) — tracked in #104; likely round-trip/tunnel aggravated,\nto be retested with deepdive running in-network next to dario.",
"is_bot": false,
"headline": "fix(synth): stream the synthesis call + idle-token deadline (#104) (#…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T16:08:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed21639f824c8c79b459d8a0959ee443ea4b75f1",
"body": "Supersedes the DuckDuckGo-confounded 2026-06-12-v0.25.0-validation.md as the\nreference board for synth/planner prompt comparisons, now that the bench runs\non a deterministic search layer (#102). 5/6 PASS, support 0.92-1.00 on the\nfive completing questions. factual-lookup is blocked by the #104 fetch wedge\n(infra, intermittent), not a regression.",
"is_bot": false,
"headline": "bench: add clean SearXNG stock baseline board (2026-06-15) (#105)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T14:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5160ab3339883c94fc2b67802cc37330c39b691",
"body": "DuckDuckGo HTML rate-limits the test box's IP and silently degrades to\nthe wikipedia fallback. For questions Wikipedia can't answer (e.g.\nfactual-lookup's \"Claude API rate limits\"), that turns a search failure\ninto a confident \"the sources don't contain it\" answer that reads like\nan LLM hedge — maki\n[…]\nards record the backend (URL kept to stderr, never\ncommitted).\n\nTests cover resolveBackend + questionArgs + the scoreboard line.\nValidated e2e: factual-lookup PASS via SearXNG, 32/32 citations (1.00).",
"is_bot": false,
"headline": "bench: run searches through SearXNG, not DuckDuckGo (#102)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T01:29:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9349685b8cd04930af0dbee1d9d2ef4ee6dd5f6b",
"body": null,
"is_bot": false,
"headline": "npm: align description to Own Your Stack",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-14T18:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43546da74300427262624b7b1cbe193d64f15961",
"body": null,
"is_bot": false,
"headline": "README: align to Own Your Stack",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-14T15:15:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4020be9d1cdc2eaa8333c5c2558d3a6ab0f99230",
"body": "Bumps [esbuild](https://github.com/evanw/esbuild) from 0.28.0 to 0.28.1.\n- [Release notes](https://github.com/evanw/esbuild/releases)\n- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1)\n\n---\nupdated-dependenci\n[…]\nld\n dependency-version: 0.28.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump esbuild from 0.28.0 to 0.28.1 (#101)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-13T20:47:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d794c01da88d801a08723c3ad120be896e6e5ebc",
"body": null,
"is_bot": false,
"headline": "release: 0.25.1 — hard per-fetch deadline (#87 wedge fix) (#100)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T21:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5071e8437693ee56add16b3b4f6beb9d8625fe0a",
"body": "* fix(browser): hard per-fetch deadline closes the #87 wedge class\n\nRoot-cause audit of the 18-minute idle hang: the page work includes\nprotocol calls the per-call timeouts cannot cover. page.evaluate accepts\nno timeout at all - a renderer main thread blocked after domcontentloaded\n(dialog, window.p\n[…]\nde\ndrains the event loop before the unref'd deadline timer fires and\nnode:test cancels the still-pending test. Keep-alive in the TEST; the\nproduction unref stays (it must never hold the process open).",
"is_bot": false,
"headline": "fix(browser): hard per-fetch deadline closes the #87 wedge class (#99)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T21:21:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e48f100b00ac27ff43519c513721d8d64fcf8ef",
"body": "…recency levers (4/3 @ 1.00) (#98)",
"is_bot": false,
"headline": "bench: v0.25.0 stock validation board — 5/6, recent PASSES with both …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T21:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248177897678965f7a41a8ad7d13877eed4d573a",
"body": null,
"is_bot": false,
"headline": "release: 0.25.0 — date-grounded planner and critic (#96)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T18:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf1b765f30ac7dfd719850dedf6a77e17120ec4f",
"body": "* feat(plan): date-ground the planner and critic prompts\n\nThe planner had no notion of the current date, so recency-sensitive\nquestions got queries anchored to the model's training-time sense of\n\"recent\" - and with --since set, the recency filter then culled most of\nwhat those stale queries returned\n[…]\n once DDG rate-limiting on this IP\ncools - the after-run hit HTTP 202 throttling mid-bench.\n\n* bench: date-grounded planner after-board — 5/6, academic 0.68->0.92, recent 1/3->2-4/3 (bistable at gate)",
"is_bot": false,
"headline": "feat(plan): date-ground the planner and critic prompts (#95)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T18:00:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "411cda2035fc3cbf230dc894bee45e33c4143615",
"body": "…(#94)\n\nThe promised unconfounded re-run: fresh npm ci + build in an isolated\nworktree at the release commit, only the shipped change set. The news\nadapter alone accounts for recent's recovery (1/3 sources at v0.23.0\n-> 3/3 at 1.00 support).",
"is_bot": false,
"headline": "bench: clean v0.24.0 board — 6/6, recent 3/3 sources at 1.00 support …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T15:33:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e73c377a49b96798d71aa46279d1f205c23b773a",
"body": "…e fallback (#93)",
"is_bot": false,
"headline": "release: 0.24.0 — news adapter (keyless Bing News RSS) + recency-awar…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T15:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6074c63ac5414d1003e0829f10d2f37bd387561",
"body": "…llback default (#92)\n\n* feat(search): news adapter (Bing News RSS, keyless) + recency-aware fallback default\n\nThe v0.23.0 bench's one failure was the `recent` question: DDG throttled,\nand the wikipedia fallback's undated/stale pages were culled by\n--since=180d, leaving 1/3 sources. Recency was the \n[…]\n in the full board). Full scoreboard 6/6 — first perfect run;\n committed in bench/results/2026-06-12-v0.24.0-news-fallback.md.\n\n* bench: disclose the concurrent-planner-edit confound on the 6/6 board",
"is_bot": false,
"headline": "feat(search): news adapter (keyless Bing News RSS) + recency-aware fa…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T15:07:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19a7fb15ba5099795f1a7d6738c215052a95b59f",
"body": "Same six questions that scored 1/6 under last night's DDG block and\n4/6 yesterday morning. With the keyword ladder (#89) and dario 4.8.66\nupstream: every run completes, citation support 0.68-1.00, cost\n$0.04-$0.16/query. The one FAIL (recent) completed with a fully-cited\nanswer but kept 1 source vs the 3-source gate — --since=180d thins\nthe pool by design; gate calibration question, not a product gap.",
"is_bot": false,
"headline": "bench: v0.23.0 validation — 5/6 PASS, 6/6 completed (#91)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T10:40:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af873fd3039cdd017bb428f72089a9797d7a3bef",
"body": null,
"is_bot": false,
"headline": "release: 0.23.0 — Wikipedia keyword ladder (#90)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T10:32:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dfffa0674887cdc15d335c6ea9d55a3e628a33d",
"body": "…terms (#89)\n\n* feat(wikipedia): keyword ladder — retry zero-result queries with key terms\n\nCloses #86. MediaWiki search matches article titles/text and returns\nzero for the planner's long natural-language queries (\"nginx\nfastcgi_buffer_size upstream sent too big header php-fpm fix\"), which\nhollowed\n[…]\nres are this exact gap; DDG re-throttled mid-bench and\nthe un-laddered fallback came back empty).\n\n* fix(query-keywords): linear punctuation trim — no quantified regex over input (js/polynomial-redos)",
"is_bot": false,
"headline": "feat(wikipedia): keyword ladder — retry zero-result queries with key …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T10:28:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "faeca9d0eda6c18793faa459f32d470824019ac6",
"body": "… block (#88)\n\nSame live conditions as the v0.21.0 baseline (DDG rate-limiting the\nbox). Default wikipedia fallback turns three zero-source deaths into\ncompleted, fully-cited answers (factual-lookup, comparison, niche-ops\nall 1.00 citation support). Strict PASS stays 1/6 because the\nsource-count gates honestly flag thin encyclopedia-only grounding; the\ntwo remaining exit-3s are the verbatim-query/encyclopedia mismatch\ntracked in #86.",
"is_bot": false,
"headline": "bench: v0.22.0 after-scoreboard — completed runs 1/6 -> 4/6 under DDG…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:25:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3f80f15b4f94426324084e10a538bf150df26cf",
"body": null,
"is_bot": false,
"headline": "release: 0.22.0 — search fallback on by default (#85)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:18:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e11422c8e33b3ee5695e78623d9ece5b0edfc410",
"body": "…never die (#84)\n\nThe v0.21.0 baseline bench (bench/results/, committed here) made the\ncase: with DuckDuckGo rate-limiting the box's IP, 5/6 default-config\nquestions died with zero sources (exit 3) while the one multi-backend\nquestion passed with 12 sources and 0.86 citation support. A default\nrun d\n[…]\non\nthat exited 3 minutes earlier now completes via the fallback — 3\nsources, 9/9 citations supported, $0.044, with the stderr notice.\n\n682 tests: default resolution, none/off/blank disable, overrides.",
"is_bot": false,
"headline": "feat(search): default --search-fallback=wikipedia — degrade visibly, …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:16:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18b2398f8c1f4524192359c97ea9100ea1a7e1de",
"body": "…on visibility, quality bench (#83)",
"is_bot": false,
"headline": "release: 0.21.0 — PDFs out of the box, --max-runtime, multi degradati…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f581bdce955a94e510bac0d63632444b292571a",
"body": "…deadline (#82)\n\nBoth straight from the first live bench run.\n\nmulti: partial-failure tolerance was HIDING sub-adapter failures — DDG\nwas rate-limited the whole run, every query silently lost its\ngeneral-web results, and the answer synthesized from one StackExchange\nsource with no indication why. No\n[…]\nuntime=5s aborts in ~6s with the named cause;\nunitless value exits 2 with usage. 681 tests (was 672): benching,\nlastFailures reset, all-benched throw, search.degraded emission,\nconfig/flag resolution.",
"is_bot": false,
"headline": "feat(search): multi degradation visibility + benching; --max-runtime …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:02:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "106f0d729de25d5f44f955bcecb07ca5f78709b0",
"body": "…es (#81)\n\nThe planner/synth prompts are the project's highest-leverage knobs and\ncan't be tuned blind. bench/run.mjs runs the golden questions in\nbench/questions.json through the built CLI against a live endpoint and\nscores each run on structural gates: completed, enough sources,\ncitation-verifier \n[…]\nund can synthesize from a single source when DDG is silently\nrate-limited inside multi: (partial-failure tolerance hides it), and\ncaught a fetch-stage wedge — both queued as the next resilience round.",
"is_bot": false,
"headline": "feat(bench): quality bench harness — golden questions, structural gat…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:53:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2522dc84d14e7ada2bcf43eb56948644c4c3c047",
"body": "…e box (#80)\n\n* feat(pdf): ship pdfjs-dist as an optional dependency — PDFs work out of the box\n\nDefault `npm install -g @askalf/deepdive` now reads PDFs with zero extra\nsteps. The academic adapters (arxiv, pubmed, semanticscholar, openalex)\nsurface PDFs constantly; silently skipping them gutted exa\n[…]\nworlds (pdfjs hidden: typecheck clean, 34\npass / 2 skipped incl. degraded-path pass; pdfjs present: 672 pass /\n1 skipped).\n\n* test(doctor): pdf check asserts ok-or-info depending on extractor presence",
"is_bot": false,
"headline": "feat(pdf): ship pdfjs-dist as an optional dependency — PDFs out of th…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:50:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "17505db7de3fa049bc3046b62e0548b554288b9c",
"body": "Rate-limit detection (DDG 202/403/429 + challenge page), request\nspacing, per-query search error tolerance with search.error events,\nzero-source abort before the synthesis call (NoSourcesError, exit 3),\nopt-in --search-fallback recovery pass, --version flag.\n\nCHANGELOG entry + README doctor sample refreshed. Merging this\npublishes 0.20.0 to npm via auto-release.yml.",
"is_bot": false,
"headline": "release: 0.20.0 — search resilience (#79)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:18:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b98d52762084d9f9cced65ba066eb53bf8759ce",
"body": "--search-fallback=<adapters> (env DEEPDIVE_SEARCH_FALLBACK, config key\nsearchFallback): when a round's primary searches produce ZERO candidates\n(rate-limited, down, or genuinely empty), the round's queries re-run once\nthrough the fallback adapter before the zero-source guard fires. A comma\nlist fans\n[…]\n (was 650): fallback recovery / not-consulted-when-healthy /\nskipped-queries coverage / both-empty still aborts; parse-args, config\nresolution, normalizeAdapterList. Completion script + usage updated.",
"is_bot": false,
"headline": "feat(search): --search-fallback recovery pass + --version flag (#78)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:14:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d877bb7df46db1a77d2d8f5f4eaef3a358f4680b",
"body": "…is (#77)\n\nDogfood finding (2026-06-10 smoke): DDG silently rate-limits a burst of\nqueries (~7 in quick succession), every search returns 0 results with no\nwarning, and the run still burns a synthesis LLM call to produce\n\"unable to answer\".\n\nThree fixes:\n\n- DuckDuckGo adapter now detects throttling \n[…]\n were\n rate limits.\n\n650 tests (was 619): DDG throttle detection + spacing, agent error\ntolerance + short-circuit + guard, preKept still averts the abort,\nmulti classification, CLI message rendering.",
"is_bot": false,
"headline": "feat(search): rate-limit detection + zero-source abort before synthes…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:11:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68e08a3ccf4b6df946e7927a1c4d37364cc466bb",
"body": null,
"is_bot": false,
"headline": "docs: refresh doctor sample version, add ecosystem footer line (#76)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-11T23:27:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10dc05ccbfd4ebed0d0a12db6c3c1fd3514a44f3",
"body": "* feat(export): heading anchors + table of contents in the HTML report (v0.19.0)\n\n- markdownToHtml gains headingIds: slug ids on headings (lowercased,\n dashed, deduped -2/-3; derived from readable text with inline markup\n and [N] cites stripped). Off by default; the HTML export enables it,\n so de\n[…]\nware, slug-consistent with\n markdownToHtml), headingPlainText, slugify.\n\n10 new tests (629 total green). Bundles the v0.19.0 release.\n\n* fix(markdown): linear slug trim to resolve js/polynomial-redos",
"is_bot": false,
"headline": "feat(export): heading anchors + table of contents (v0.19.0) (#75)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-10T01:06:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6456a83cfb8670d28d711bc4a9a296d9d424e61a",
"body": "- deepdive rerun <id>: fresh re-run + automatic diff vs the parent (#72)\n- --search=multi:a,b[,c...]: concurrent fan-out across adapters (#73)\n\n607 → 619 tests. See CHANGELOG for the full 0.18.0 entry.",
"is_bot": false,
"headline": "release: 0.18.0 — rerun + multi-adapter fan-out (#74)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-09T21:42:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5906062baf06bc3e446bc1657a3f28801ba2f8c7",
"body": "Queries every listed adapter concurrently, interleaves results\nround-robin in adapter order, dedupes on the normalized URL, re-ranks\ndensely. Partial failures tolerated (a throttled backend doesn't sink\nthe round); throws only when EVERY sub-adapter failed, naming each.\nSub-adapters resolve recursiv\n[…]\nain engine or two gives the planner a source pool no single\nbackend returns.\n\nNew exports MultiSearch/interleaveResults. 12 new tests (619 total\ngreen); live-verified interleaving ddg+wikipedia+arxiv.",
"is_bot": false,
"headline": "feat(search): multi-adapter fan-out — --search=multi:a,b[,c...] (#73)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-09T21:33:33Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 39,
"commits_last_year": 170,
"latest_release_at": "2026-07-20T14:48:57Z",
"latest_release_tag": "v0.32.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 14,
"days_since_latest_release": 6,
"mean_days_between_releases": 3.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@askalf/deepdive",
"exists": true,
"license": "MIT",
"keywords": [
"research",
"agent",
"llm",
"local",
"cli",
"anthropic",
"openai",
"claude",
"search",
"deep-research",
"perplexity-alternative",
"cite",
"citations",
"self-hosted"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@askalf/deepdive",
"is_deprecated": false,
"latest_version": "0.32.0",
"repository_url": "https://github.com/askalf/deepdive",
"versions_count": 39,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3313,
"first_published_at": "2026-04-22T16:11:15.637000Z",
"latest_published_at": "2026-07-20T14:49:47.192000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 2,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 75892,
"source_files_sampled": 134,
"oversized_source_files": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4940
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.15",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 5
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 111,
"malicious_count": 0,
"assessed_package": "npm:@askalf/deepdive@0.32.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "playwright",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.47.0"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.3"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "playwright",
"direct": true,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": true,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/compat-data",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/core",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/generator",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-compilation-targets",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-globals",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-imports",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-transforms",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-string-parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-option",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helpers",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/template",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/traverse",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openharmony-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.15",
"ecosystem": "npm"
},
{
"name": "@isaacs/fs-minipass",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "@istanbuljs/schema",
"direct": false,
"version": "0.1.6",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/bug-detectors",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/core",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/fuzzer",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/hooking",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/instrumentor",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.13",
"ecosystem": "npm"
},
{
"name": "@jridgewell/remapping",
"direct": false,
"version": "2.3.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.31",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-android-arm64",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-darwin-arm64",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-darwin-x64",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-arm-gnueabihf",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-arm64-gnu",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-arm64-musl",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-riscv64-gnu",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-x64-gnu",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-x64-musl",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-win32-arm64-msvc",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-win32-x64-msvc",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "26.1.1",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.20.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "append-transform",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "baseline-browser-mapping",
"direct": false,
"version": "2.10.43",
"ecosystem": "npm"
},
{
"name": "bindings",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.28.6",
"ecosystem": "npm"
},
{
"name": "buffer-from",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30001805",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "cmake-js",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "convert-source-map",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.6",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "deep-extend",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "default-require-extensions",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.5.389",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "express",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.5.2",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.4",
"ecosystem": "npm"
},
{
"name": "file-uri-to-path",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "11.3.6",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "gensync",
"direct": false,
"version": "1.0.0-beta.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.29",
"ecosystem": "npm"
},
{
"name": "html-escaper",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.3",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "1.3.8",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-coverage",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-hook",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-instrument",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-report",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "istanbul-reports",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.2.3",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "jsesc",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "json5",
"direct": false,
"version": "2.2.3",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "6.2.1",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "make-dir",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "minizlib",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": false,
"version": "8.9.0",
"ecosystem": "npm"
},
{
"name": "node-api-headers",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "2.0.51",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.2",
"ecosystem": "npm"
},
{
"name": "pdfjs-dist",
"direct": false,
"version": "6.1.200",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "playwright-core",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "proper-lockfile",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.3",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "rc",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "retry",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "6.3.1",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.8.5",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-support",
"direct": false,
"version": "0.5.21",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "tar",
"direct": false,
"version": "7.5.22",
"ecosystem": "npm"
},
{
"name": "tmp",
"direct": false,
"version": "0.2.7",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tsx",
"direct": false,
"version": "4.23.1",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "5.9.3",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "universalify",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "update-browserslist-db",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "url-join",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.3",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.2",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 241,
"direct_count": 3,
"indirect_count": 238
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 163,
"open_issues": 1,
"closed_ratio": 0.95,
"closed_issues": 19,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "askalf",
"commits": 139,
"avatar_url": "https://avatars.githubusercontent.com/u/263217947?v=4"
},
{
"type": "User",
"login": "tgonzalezc5",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/102870299?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.993
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"actionlint.yml",
"auto-release.yml",
"cflite.yml",
"ci.yml",
"codeql.yml",
"npm-drift-watch.yml",
"publish.yml",
"scorecard.yml",
"stale.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 4/22 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 8,
"reason": "2 out of the last 2 releases have a total of 2 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "4a13089fe289c7adf72ad79c0fe7aa744e1731da",
"ran_at": "2026-07-27T00:59:18Z",
"aggregate_score": 8.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T17:04:46Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-26T17:03:50Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 186,
"created_at": "2026-07-26T18:08:29Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/askalf/deepdive",
"host": "github.com",
"name": "deepdive",
"owner": "askalf"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"security": 86,
"vitality": 84,
"community": 45,
"governance": 55,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 84,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 170,
"human_commit_share": 0.85,
"days_since_last_push": 0,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "170 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 170
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"releases_count": 39,
"latest_release_tag": "v0.32.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 3.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "39 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 39
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "2 out of the last 2 releases have a total of 2 signed artifacts.",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 45,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 2,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"@askalf/deepdive"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3313
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,313 downloads/month across npm",
"points": 46.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3313,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.993
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"merged_prs": 163,
"open_issues": 1,
"closed_issues": 19,
"issue_closed_ratio": 0.95,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "95% of issues closed",
"points": 44.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 95
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "163/166 decided PRs merged",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 163,
"decided": 166
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/22 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"followers": 21,
"owner_type": "User",
"is_verified": null,
"owner_login": "askalf",
"public_repos": 23,
"account_age_days": 154
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "21 followers of askalf",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 21,
"login": "askalf"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "23 public repos, account ~0 yr old",
"points": 10.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 23
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@askalf/deepdive"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "39 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 39
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"ai",
"cli",
"llm",
"research-agent",
"search",
"anthropic",
"citations",
"claude",
"deep-research",
"perplexity-alternative",
"self-hosted",
"mcp",
"model-context-protocol"
],
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/@askalf/deepdive",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/@askalf/deepdive",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 86,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "excellent",
"name": "Security posture",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 8.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/22 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "2 out of the last 2 releases have a total of 2 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:@askalf/deepdive@0.32.0 runtime dependency closure — what installing the published package pulls in — 111 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@askalf/deepdive@0.32.0",
"assessed": 111
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 88,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 111,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "@hono/node-server 1.19.15 (moderate 5.9)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 111,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.965,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4940
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "82 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 82,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.15
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "15 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 15,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 75892,
"source_files_sampled": 134,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/134 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 134,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T00:59:34.262877Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/askalf/deepdive.svg",
"full_name": "askalf/deepdive",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit askalf/deepdive teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
