bitwise-media-group/evolve erreicht einen Gesundheitsindex von 70 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei AI Readiness (90/100) ab, am schwächsten bei Community & Adoption (50/100). Zuletzt vor 4 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
70
gesamt / 100
Gut
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
70
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25
Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
3
affected_packages
3
assessed_packages
220
unassessed_packages
0
affected_by_severity
moderate 1, unknown 2
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 220 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Handhabbare Dateigrößen — 0/244 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
Go
largest_source_bytes
37.392
source_files_sampled
244
oversized_source_files
0
Eckdaten
4GitHub-Sterne
5Mitwirkende
168Commits, letzte 12 Monate
4Tage seit letztem Push
8Releases
1Bus-Faktor
4offene Issues
Go, PyPIPaket-Ökosysteme
Warnungen zur Datenerhebung
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
pypi package 'evolve' points at a different repository (https://github.com/JamesHabben/evolve); excluded from ecosystem scoring
deps.dev does not index pypi:evolve@1.5; advisories assessed against the repository dependency graph instead
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 5 ⇿
0Sterne
5Forks
8Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 5Patch 3
OpenSSF Scorecard 8.2 / 10
8.2Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-30 17:09 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 26 direkte und 194 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 220 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 3 tragen bekannte Advisories, davon 0 direkte.
Paket
Version
Beziehung
Schweregrad
Advisories
Behoben in
pymdown-extensions
10.21.3
indirekt
mittel
1
11.0.0
golang.org/x/net
v0.55.0
indirekt
unbekannt
1
0.56.0
golang.org/x/text
v0.37.0
indirekt
unbekannt
1
0.39.0
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"claude-code",
"cursor",
"gemini",
"agent-evals"
],
"is_fork": false,
"size_kb": 1523,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 1300355,
"CSS": 8626,
"HTML": 21686,
"Shell": 33594,
"Makefile": 497,
"TypeScript": 24211
},
"pushed_at": "2026-07-26T09:56:19Z",
"created_at": "2026-06-12T11:12:55Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T11:47:30Z",
"description": "A cli tool for evaluating coding agent plugins with a multi-tier approach.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://oss.bitwisemedia.uk",
"name": "Bitwise Media Group Ltd.",
"type": "Organization",
"login": "bitwise-media-group",
"company": null,
"location": "United Kingdom",
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/282673588?v=4",
"created_at": "2026-05-07T18:23:54Z",
"is_verified": null,
"public_repos": 15,
"account_age_days": 83
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-07-03T22:24:44Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-01T10:06:17Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-06-25T08:40:13Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-06-24T12:54:01Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-06-23T05:40:47Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-06-17T08:00:57Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-13T22:12:53Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-12T18:15:05Z"
}
],
"recent_commits": [
{
"oid": "d66e4a39f2e7e24f96161e3c917e6233f67f59e4",
"body": "Repin every caller in .github/workflows from v5.0.0\n(ee856f73ecea9b0c2c989d3a6aa585774b0d2a38) to v6.0.1\n(b9c031429f149794bedb5411b08d5a787b8d9959).\n\nv6.0.0 is breaking for release.yaml callers only: its goreleaser job now\nrequests packages: write to push container images built via goreleaser\ndocker\n[…]\nso the grant is\nmandatory or the whole run startup-fails. No input or secret signatures\nchanged in any of the eight workflows.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: bump the reusable org workflows to v6.0.1",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-26T09:38:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2900a7e140209d6a1878cfdd15d8ebeb778b4453",
"body": "…#99)\n\nBumps [postcss](https://github.com/postcss/postcss) from 8.5.16 to 8.5.23.\n- [Release notes](https://github.com/postcss/postcss/releases)\n- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/postcss/postcss/compare/8.5.16...8.5.23)\n\n---\nupdat\n[…]\nss\n dependency-version: 8.5.23\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump postcss from 8.5.16 to 8.5.23 in /internal/web/ui (…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T04:06:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a55467f0b2090a4eecd484bc894d0b4928128574",
"body": "…go_modules group across 1 directory (#97)\n\ndeps(deps): bump google.golang.org/grpc\n\nBumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.81.1 to 1.82.1\n- [Release notes](https://github.com/g\n[…]\n\n dependency-type: indirect\n dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in the …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T04:01:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da278f1e6ff46c9ba137f31c4cdb3d481c621b0e",
"body": "Bumps [.mise](https://github.com/bitwise-media-group/toolchain) from `3a2f989` to `3f41831`.\n- [Release notes](https://github.com/bitwise-media-group/toolchain/releases)\n- [Commits](https://github.com/bitwise-media-group/toolchain/compare/3a2f98941fa50c0c91d8db27e27b30c4f3b60fbb...3f41831141fbb24434\n[…]\ned-dependencies:\n- dependency-name: \".mise\"\n dependency-version: 3f41831141fbb24434e43710c9576793589b070a\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump .mise from `3a2f989` to `3f41831`",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T02:55:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de4cfac4b9f2b38a0a80c48c272917f25bd9d628",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.6.0",
"author_name": "bitwise-fast-forward-merge[bot]",
"author_login": "bitwise-fast-forward-merge[bot]",
"committed_at": "2026-07-18T17:01:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c533d112e82128afd79a3b9ac838fd6925d2869",
"body": "Closes #63",
"is_bot": false,
"headline": "docs: add socials to footer",
"author_name": "Tiffany Wang",
"author_login": "tiffanywang3",
"committed_at": "2026-07-18T16:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0447c4d2e6f1fbba054bcb7fb3e43d301dbe06b1",
"body": "The cask used generate_completions_from_executable, which makes Homebrew\nexecute the freshly staged binary at install time. Homebrew installs\ncask artifacts in a fixed type-based order, but GeneratedCompletion is\nmissing from that sort table (brew 6.0, and still on master), so its\nposition falls to \n[…]\nit still clears quarantine so the\ninstalled binary runs without a Gatekeeper prompt.\n\nPorts bitwise-media-group/dotty@16cb6e9.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(release): ship static shell completions in the Homebrew cask",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-18T16:19:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "062dfadb210c2b8524d30b7679e06c9b0b97e0e6",
"body": "…group (#91)\n\nbuild(deps): bump zensical in the docs-tooling group\n\nBumps the docs-tooling group with 1 update: [zensical](https://github.com/zensical/zensical).\n\n\nUpdates `zensical` from 0.0.46 to 0.0.50\n- [Release notes](https://github.com/zensical/zensical/releases)\n- [Commits](https://github.com\n[…]\nersion-update:semver-patch\n dependency-group: docs-tooling\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump zensical from 0.0.46 to 0.0.50 in the docs-tooling …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-17T02:57:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "002cf819162775e079cff99c2d96b94cb229b8d9",
"body": "Classify each plugin by its manifest version and gate Tier 1/Tier 2\nevidence issues per plugin: a plugin whose maturity is in the gated set\nfails `report --check`, others only warn (evidence still renders either\nway). Maturity is stable (>= 1.0.0), unstable (< 1.0.0), or prerelease\n(a SemVer prerele\n[…]\nstandalone plugin repository reach the same verdict for equivalent\nevidence and config. Tier 0 (`run checks --strict`) is unchanged and\nnever maturity-exempt.\n\nAssisted-by: Claude Opus 4.8\nCloses: #73",
"is_bot": false,
"headline": "feat(report): maturity-aware evidence gating for report --check",
"author_name": "Johan-Kees Vliek",
"author_login": "johankees",
"committed_at": "2026-07-16T05:26:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2949ef0fd58c6fcc01908e32292f511f71008ec9",
"body": "Bumps [golang.org/x/term](https://github.com/golang/term) from 0.44.0 to 0.45.0.\n- [Commits](https://github.com/golang/term/compare/v0.44.0...v0.45.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/term\n dependency-version: 0.45.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#90)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-16T02:56:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb835d8b9336769bbdab5c138a287e4fbcb8b387",
"body": "Split the long parseGrokResult condition, simplify splitAllowRules\nswitch cases, and realign stub harness method sets.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "style(harness): fix lll and gofmt after grok harness",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-15T07:20:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "631ef9c1b18b655feb1b1376a06e4cb16d91d124",
"body": "Headless streaming-json never emits tool events, so ScanLine could not see skill activation and every positive trigger scored as a miss.\n\nRecover hits from the session ACP updates.jsonl on end, and short-circuit positives via a PreToolUse hook that marks a per-invocation hit file (runner SideHit pol\n[…]\neys remain CI/token-count fallback). Thread workDir through ScanLine and add runner.Scan for optional side-channel early-exit.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(harness): make Grok trigger detection reliable",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-15T07:13:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "081bde627aca3116945b8cfaa31f325db7349d99",
"body": "Drive the grok CLI with Claude-parity sandbox and --allow rules, register\nxai/grok-4.5 (and fold grok-composer-2.5-fast into cursor/composer-2.5), and\nwire xAI tokenize-text counting plus model listing.\n\nCloses #75\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(harness): add Grok harness with xAI models",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-15T07:13:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a51b38e53243f6a9f6fba7bed3efa7617e672c5",
"body": "* add sol, terra, and luna models to the codex and copilot harnesses\n\nCloses #85\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(model): add GPT-5.6 built-ins",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-15T05:54:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca17ec3daf3dba7acd6ac16e5945db39318e93d",
"body": "Bumps [.mise](https://github.com/bitwise-media-group/toolchain) from `ecbb149` to `3a2f989`.\n- [Release notes](https://github.com/bitwise-media-group/toolchain/releases)\n- [Commits](https://github.com/bitwise-media-group/toolchain/compare/ecbb1499b86e94720b0de9d997fec1b9d3f07772...3a2f98941fa50c0c91\n[…]\ned-dependencies:\n- dependency-name: \".mise\"\n dependency-version: 3a2f98941fa50c0c91d8db27e27b30c4f3b60fbb\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump .mise from `ecbb149` to `3a2f989`",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T02:53:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23b66999a700e30ea79c188c1a028ee891c5a11b",
"body": "Bumps [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) from 2.1.0 to 2.1.1.\n- [Release notes](https://github.com/charmbracelet/bubbles/releases)\n- [Commits](https://github.com/charmbracelet/bubbles/compare/v2.1.0...v2.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: charm.land/bub\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 (#80)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T02:59:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8279ddd3d43ed80eb2e6bae7a13b42388daab8e6",
"body": "Results files and the EVALUATION rollup are forward-compatible only, so\nan older evolve regenerating them destroys data written by a newer one.\nLoadDir previously discarded a newer-schema file as a blank slate; it now\nreturns an error wrapping the new results.ErrSchemaTooNew sentinel, and\nMigrateFil\n[…]\n probes any existing EVALUATION\nrollup (schema now the named report.SummarySchema constant) before\nwriting anything.\n\nRefs: #44\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(results): refuse to overwrite newer-schema results and reports",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-10T14:44:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a836ce5b90d16fed8bb895f29190f1c1f1e60056",
"body": "Migrate from the Makefile-fragment library (make/ submodule, go-cli.mk)\nto bitwise-media-group/toolchain v2: the submodule remounts at .mise/\n(new repo name in .gitmodules; GitHub redirects the old URL), a root\nmise.toml selects the go-cli archetype and carries the [vars] knobs\n(app, app_pkg, build_\n[…]\nlows v5.0.0, the mise-task-aware\npipeline generation that discovers which canonical tasks the repo\ndefines and skips the rest.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "build: adopt the toolchain mise-task layout",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-10T12:34:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f9b4ffc9c94805f8ea7168b42fc8d5e2b295062",
"body": "Bumps [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) from 2.0.7 to 2.0.8.\n- [Release notes](https://github.com/charmbracelet/bubbletea/releases)\n- [Commits](https://github.com/charmbracelet/bubbletea/compare/v2.0.7...v2.0.8)\n\n---\nupdated-dependencies:\n- dependency-name: charm.\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 (#76)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T02:58:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d279cff11f66def9586c12e3d998660ae7ddddc",
"body": "…mization\n\nScrolling the form or the dashboard's Execution pane corrupted the frame:\nthe top and bottom of the view stuck while a middle region scrolled,\nleaving duplicated rows that persisted. Root cause (reproduced standalone\nand reported upstream): after ultraviolet's DECSTBM hard-scroll shifts a\n[…]\nttps://github.com/charmbracelet/ultraviolet/issues/137\n\nAlso carries the hashicorp/go-version require used by the next commit.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(tui): force full repaints around ultraviolet's broken scroll opti…",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-10T01:01:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42189295ce40322bd8e6f5e2259c8a735ab8b25a",
"body": "Click to focus panes and act on the row hit: toggle form checkboxes,\nfold tree groups, select runs, switch rollup tabs, press CANCEL/RUN,\nand fire the footer's open-dir/open-log targets. The wheel scrolls the\npane under the cursor without moving focus (offset panes step by 3,\nselection-centered pane\n[…]\ns through the\nexisting keyboard mutators, so the Session and shared-selection\ninvariants gain no second code path.\n\nCloses #69\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): add mouse support to the run form and dashboard",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-10T01:01:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7554718858474e2aba981ee1482943cb48100f1b",
"body": "* deps(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0\n\nBumps [golang.org/x/sync](https://github.com/golang/sync) from 0.21.0 to 0.22.0.\n- [Commits](https://github.com/golang/sync/compare/v0.21.0...v0.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sync\n dependency-version: 0.2\n[…]\nfery <dmccaffery@users.noreply.github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 (#74)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T00:56:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3096d0a973885edcb9e4f384a785e31dd5a73343",
"body": "Bumps [make](https://github.com/bitwise-media-group/make) from `bb28e1d` to `2dea7fe`.\n- [Release notes](https://github.com/bitwise-media-group/make/releases)\n- [Commits](https://github.com/bitwise-media-group/make/compare/bb28e1d97512ab3f13ca8b89f29fb9da836bf720...2dea7fe8c1e074e775128ca1043c6b6790\n[…]\n128ca1043c6b67900320f0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump make from `bb28e1d` to `2dea7fe` (#71)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T14:56:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19b4bab10a08f14a93c69d4e1e4d2c1b21b9db72",
"body": "Bumps the bitwise-media-group group with 8 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bitwise-media-group/github-workflows/.github/workflows/add-to-project.yaml](https://github.com/bitwise-media-group/github-workflows) | `4.3.1` | `4.4.0` |\n| [bitwise-media-group/github-workflows/.gith\n[…]\nupdate:semver-minor\n dependency-group: bitwise-media-group\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps(deps): bump the bitwise-media-group group with 8 updates (#70)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T02:59:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1632886ab825bfefd5264f01ccffbd6b922f927",
"body": "Advance the SHA pin from d8af26d (v4.3.0) to a28e6738 (v4.3.1); no caller-contract changes.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "build(deps): bump github-workflows reusable workflows to v4.3.1",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-04T19:57:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbba99873465084f7e1bccdc89546dc0b4c84ae1",
"body": "Group and unit rollups now classify against the report thresholds\ninstead of \"any failure is red\": a green check when every case passed,\na new orange check (stPassThreshold) when a tier has failures but its\npass rate meets the tier's minimum, and a red cross only below it. The\nworst tier verdict dec\n[…]\nhares\nthe new leftDims split so ctrl+d/ctrl+u paging stays true. Dropped on\nshort terminals, mirroring the form legend's rule.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): threshold-based rollup indicators and an Execution legend",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-04T19:32:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1888d5d763e66d42ff902617b60111f1acbfdec0",
"body": "report.thresholds.triggers_min_pass_rate and evals_min_pass_rate now\ndefault to 0.5 and 0.66 instead of \"unset = no gate\": Thresholds\ncarries plain float64 rates, Options.Thresholds() falls back to the new\nreport.Default* constants, both tiers always gate, and the --check\n\"no thresholds configured\" \n[…]\nthe built-in defaults (triggers\n0.5, evals 0.66), and a tier left unset in config is gated at its\ndefault rather than skipped.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(report)!: gate report --check at default pass-rate thresholds",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-04T19:32:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b5fec71faeead8616769c9fb8693233aaa63c517",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs(evaluations): add schema reference to overview",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-04T19:32:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af312e1af759e8e96e3334679413d3a46d62a929",
"body": "Bumps the bitwise-media-group group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bitwise-media-group/github-workflows/.github/workflows/add-to-project.yaml](https://github.com/bitwise-media-group/github-workflows) | `4.1.0` | `4.3.0` |\n| [bitwise-media-group/github-workflows/.gith\n[…]\npendency-version: 4.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: bitwise-media-group\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump the bitwise-media-group group with 7 updates",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-04T19:20:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de2272a5f57b7419b271c526b9aaa381c28233ff",
"body": "Replace evolve's hand-written Makefile with the shared go-cli.mk archetype from\nbitwise-media-group/make, mounted as the make/ submodule (tracking the release\nbranch). The canonical lint/build/test/ci/pr contract now comes from the\nlibrary; only evolve's knobs (APP, the withui build tag, fuzz defaul\n[…]\nigrated Makefile; the pr\ngate keeps its full order (tidy fmt lint test fuzz bench build docs snapshot\nsmoke) with commit last.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "build(make): adopt shared Makefile library via submodule",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-04T19:11:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7993c00537325ee9f12dc3a72b26fd23d932f0a8",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.5.1",
"author_name": "bitwise-fast-forward-merge[bot]",
"author_login": "bitwise-fast-forward-merge[bot]",
"committed_at": "2026-07-03T02:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61318018812de53ecd026855470f9f2e67477191",
"body": "Bumps [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) from 2.0.4 to 2.0.5.\n- [Release notes](https://github.com/charmbracelet/lipgloss/releases)\n- [Commits](https://github.com/charmbracelet/lipgloss/compare/v2.0.4...v2.0.5)\n\n---\nupdated-dependencies:\n- dependency-name: charm.land/lipgloss/v2\n dependency-version: 2.0.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-03T02:53:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa374a8ffaa2fd6efcab3319591d055e248c1ef",
"body": "Update the embedded report-viewer SPA to Vite 8.1 (the Rolldown-based\nmajor) and replace React 18 with direct Preact 10 imports — no\npreact/compat shim: hooks come from preact/hooks and main.tsx mounts\nwith Preact's render(), dropping StrictMode (a compat-only no-op).\n@vitejs/plugin-react gives way \n[…]\nd). The only plain-Preact\nbehavior difference (native onChange semantics) is confined to a\ncheckbox, where it matches React's.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor(web): switch report viewer to Preact and Vite 8",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-02T18:39:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "777c2819bbb9c92645b65c2f22c2bab8b55ad2e5",
"body": "Bring the docs site in line with the other oss.bitwisemedia.uk sites:\n\n- add the [project.extra.consent] dialog (analytics + github cookies)\n and the footer \"Change cookie settings\" link that re-opens it\n- add Google Analytics 4 (G-Y34HV8TX89), gated on the analytics\n consent toggle\n- set extra.scope = \"/\" so the consent choice is stored at the domain\n root and one answer applies across all subsites\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: add cookie consent and GA4, shared across oss.bitwisemedia.uk",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-02T18:28:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3292dbe5f02838c1e4b94492eb5eb44227a3c11",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: add supported models for copilot cli",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-02T18:28:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f2616be853c9d1da9f5f3a5566e1a82b6c0c41f",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: add dotty secret keys",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-02T18:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09be408a24d8d8e22c6e5312772c0fe01d417164",
"body": "evolve models discover queries each vendor's model-listing API\n(Anthropic, OpenAI, Google - same credentials as token counting) and\nrenders the catalog in a full-screen fuzzy-find multi-select picker:\ntype to filter, tab to select any number of models, enter to write them\ninto the repo's .evolve con\n[…]\n a fresh .evolve.yaml is\ncreated. Vendor listing APIs publish no pricing, so injected entries\ncarry none until edited by hand.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(models): add discover verb with fuzzy picker and config injection",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-02T18:28:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5c672805ef126abaed451051bdbf596cf639734",
"body": "Register anthropic/claude-sonnet-5 ($3/$15 per MTok sticker rate; 1M\ncontext) as a Claude Code-driven model, slotted between Sonnet 4.6 and\nOpus 4.8. No Copilot entry yet - Copilot's CLI id for Sonnet 5 is\nunverified, and Supported entries are added only once confirmed.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(model): add Claude Sonnet 5 to the Anthropic registry",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-07-02T18:28:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6575acbc9fdf643e9dbd59c85640cc5730e546a2",
"body": "Bumps the bitwise-media-group group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bitwise-media-group/github-workflows/.github/workflows/ci.yaml](https://github.com/bitwise-media-group/github-workflows) | `4.0.4` | `4.1.0` |\n| [bitwise-media-group/github-workflows/.github/workflows\n[…]\npendency-version: 4.1.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: bitwise-media-group\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "deps(deps): bump the bitwise-media-group group with 7 updates",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-02T02:53:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3f09f834317693c05555e6218d7b7ff013ac0d1",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.5.0",
"author_name": "bitwise-fast-forward-merge[bot]",
"author_login": "bitwise-fast-forward-merge[bot]",
"committed_at": "2026-07-01T09:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7d16820b2f29fc541f0a1f4fe51edcd0c370614",
"body": "Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.3.1 to 2.3.2.\n- [Release notes](https://github.com/containerd/containerd/releases)\n- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)\n- [Commits](https://github.com/containerd/cont\n[…]\n.3.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/containerd/containerd/v2\n dependency-version: 2.3.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/containerd/containerd/v2 in /tools",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T09:23:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "adfaa434571b8db7dbe37345baecb44a0975a632",
"body": "Signed-off-by: BitWise Admins <270485327+admin-bitwise@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: sync .github/workflows/add-to-project.yaml from github-settings",
"author_name": "BitWise Admins",
"author_login": "admin-bitwise",
"committed_at": "2026-07-01T09:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7228e7d54d9c15abebc675230cb68e623960c50d",
"body": "Signed-off-by: BitWise Admins <270485327+admin-bitwise@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: sync .github/workflows/add-to-project.yaml from github-settings",
"author_name": "BitWise Admins",
"author_login": "admin-bitwise",
"committed_at": "2026-07-01T07:53:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58dbd3c0839a6df0ce20afacb887b5504b316b49",
"body": "Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.5.1 to 1.5.2.\n- [Release notes](https://github.com/sigstore/rekor/releases)\n- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/sigstore/rekor/compare/v1.5.1...v1.5.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/sigstore/rekor\n dependency-version: 1.5.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/sigstore/rekor in /tools",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T04:51:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f950e7fd1d12a89c08265d3c0ca6a9b03ad98584",
"body": "Repin every reusable-workflow caller to v4.0.4 (merge-notice up from v2.0.0). The v4.0.1/v4.0.2 checks:read and statuses:read grants are internal to the reusable merge workflow (App token), so the callers need no permission changes.\n\nv4.0.0 moves docs publishing into the reusable release workflow, s\n[…]\nassets/*.png screenshots embed as real images. Pages already deploys from GitHub Actions, so no repo setting change is needed.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: upgrade reusable workflows to github-workflows v4.0.4",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-30T23:18:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bae2ca42b846951014998ac9272eada062f43ae8",
"body": "`evolve report` can now also write a JUnit XML test-results file\n(--junit / report.junit) — one testcase per eval/trigger case per model, grouped\ninto a suite per skill — and a Cobertura XML coverage profile\n(--cobertura / report.cobertura). A skill counts as covered when it has a\ncurrent eval resul\n[…]\nn every defined model has a current\nresult. Both artifacts are opt-in and emitted alongside the EVALUATION rollup.\n\nCloses #37\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(report): emit JUnit and Cobertura artifacts with a --strict gate",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-28T13:53:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed152849b24d1eae605bbd30335e26627c70dd42",
"body": "…estriction\n\nDrop the per-case `skip_providers` field from triggers and evals and replace it\nwith a top-level `models` field on the evals file, named the same way as the\nroot `models` config (provider ids, canonical model ids, or \"all\"). A skill's\neffective matrix is the intersection of the root mod\n[…]\nhe top-level `models` field on its evals file instead; the\neffective set is the intersection with the root models.\n\nCloses #36\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor(evalspec)!: replace skip_providers with an eval-set models r…",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-28T13:44:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4fc0a4d9389f30372e23f2413db8738a06595adb",
"body": "Signed-off-by: deanhigh <deanhigh@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(checks): added some testing around the outputs",
"author_name": "deanhigh",
"author_login": "deanhigh",
"committed_at": "2026-06-28T13:34:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64b52afdd00dbc0b61d1f9182d975c4cc98696e6",
"body": "Having references to these in variable names makes it annoying to add\nlater, the less of these references the better.",
"is_bot": false,
"headline": "fix: remove many explicit references to claude and codex",
"author_name": "deanhigh",
"author_login": "deanhigh",
"committed_at": "2026-06-28T13:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272e62ce260e76d9f3d34805fdd7d3e851755919",
"body": "claude.",
"is_bot": false,
"headline": "fix: corrected the descriptions of compatibility issue between codex and",
"author_name": "deanhigh",
"author_login": "deanhigh",
"committed_at": "2026-06-28T13:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ef175660517cb53166f24fe63ffd159bff624d5",
"body": "- checks.require_codex_manifest and checks.forbid_hooks removed.",
"is_bot": false,
"headline": "fix: introduce checks.plugin_manifests",
"author_name": "deanhigh",
"author_login": "deanhigh",
"committed_at": "2026-06-28T13:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afb17cd4cc6753a1d324ca2ceaf13ebb431a9de5",
"body": "Re-detection of findings 1 and 2: the (*EvalsFile).normalize merge step,\nwith its make([]Assertion, ...) capacity hint, moved from\ninternal/evalspec/evalspec.go:188 to internal/evalspec/evals.go:166 in the\n'refactor(evalspec): split triggers and evals into separate files' commit.\nCodeQL closed findi\n[…]\ns pin every code reference to the commit each finding was opened\nagainst. Dismissed in the code-scanning UI as false positive.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs(security): triage code-scanning findings 3 and 4 as false positive",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T14:07:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "325d0fda592bc403e64532e722f163a5ee25b4cf",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.4.0",
"author_name": "bitwise-fast-forward-merge[bot]",
"author_login": "bitwise-fast-forward-merge[bot]",
"committed_at": "2026-06-25T08:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8d72c8d150d9b12c5d75d79991792f2b09fa201",
"body": "`evolve view` serves the committed results as an interactive, read-only web\nreport: a localhost HTTP server hosting an embedded Vite/React single-page app\nover a JSON API. Filter by provider/model/plugin/skill/type/pass-fail, sort any\ncolumn, toggle a per-case <-> per-model-rollup view, and export a\n[…]\n The report docs move under\ndocs/reports/ (index.md + viewer.md); AGENTS, DESIGN, and the generated CLI\nreference are updated.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(view): add web report viewer",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T08:24:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c060d86f552b71fe619be726eec50d6f982fd78a",
"body": "A generic helpers_test.go does not mirror any source file. Move package-wide test\nhelpers into the canonical <pkgname>_test.go: telemetry helpers merge into\ntelemetry_test.go, and tui helpers_test.go becomes tui_test.go.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "test: house package-wide test helpers in <pkgname>_test.go",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T08:01:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a09f6a939f8f603a8f1504b0f983302461ce63de",
"body": "The single evalspec.go mixed the trigger and eval definitions. Split it into\ntriggers.go (Trigger, TriggersFile, LoadTriggers, ValidateTriggers) and evals.go\n(Assertion, FileRef, Eval, EvalsFile, LoadEvals, normalize, ValidateEvals). Tests\nsplit to match (triggers_test.go, evals_test.go), with the shared write helper in\nevalspec_test.go.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor(evalspec): split triggers and evals into separate files",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T08:01:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e41f31f2dd0a0e3c6026d18590403982b1588edd",
"body": "Split the stored results and the rendered reports into two pages.\n\ndocs/evaluations/results.md (Authoring evaluations) covers the committed\nper-skill results.<ext> files: location, formats, model-major schema,\nusage/pricing sub-objects, and prior snapshots.\n\ndocs/reports.md is a new top-level page c\n[…]\nReviewing reports at the top level) and cross-link them from\nevaluations/index.md, evaluations/execution.md, and reference.md.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: add results and reports reference pages",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T07:33:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eacd6d03b74e85fa4c3a04b6ba50ea7673b00755",
"body": "…chema\n\nevolve report --migrate rewrites every stored results file in the current\nschema before generating the reports, so a structural schema bump lands in the\ncommitted files without a full eval rerun.\n\nMigration was previously only persisted as a side effect of a run (LoadDir\nupgrades v3/v4 files\n[…]\ne LoadDir which resets). The\nmigratable range now lives in one place, results.Migratable, gating both\nLoadDir and MigrateFile.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(report): add --migrate to upgrade stored results to the latest s…",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T07:33:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "125005458a0ae20ba3bc33c3dd0fc9cadb4e885c",
"body": "…a (v5)\n\nSimplify the plugin-level EVALUATION.md to a case-major layout: one heading per trigger and per eval, each with a single table whose rows are the models, reusing the marketplace rollup's columns. Cross-model comparison on a single case is now the default view, replacing the model-major deta\n[…]\ns as results arrays). Files written by an older evolve are migrated in place on load; a file from a newer evolve still resets.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(report)!: case-major plugin reports and normalized results schem…",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T07:33:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1104644600592dc69bdfa78a56542114f5955548",
"body": "Pins the merge, merge-review-ack and Dependabot auto-merge callers to github-workflows v3.0.0. The auto-merge machinery now triggers only on issue_comment, workflow_run and schedule — events that attach no check run to the PR — so the merge/* and auto-merge/* skipped checks are gone. Approvals are c\n[…]\nnally adopts app-client-id/app-private-key so the release-please PR is authored by the FF Merge App and can itself auto-merge.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: migrate workflow callers to github-workflows v3",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-25T07:27:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6f27c658b261ac5662f4e6cc5f7a27b683e63aea",
"body": "Cover what a skill is, the layout and frontmatter evolve expects, the Tier 0 checks a skill must pass, and how the advisory size and conciseness signals work. Link to agentskills.io for authoring guidance and flag the signals as deliberately weak proxies. Wire the page into the Zensical nav and cros\n[…]\nerated by make docs (which also builds the Zensical site); everything else under docs, including config/index.md, is authored.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: add Authoring skills guide",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T22:55:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc0f000aa3404b2fe7eec0c0b9178e7b984912d9",
"body": "run checks now reports advisory 0-100 size and conciseness scores for each SKILL.md alongside the pass/fail findings. The scores are pure functions of the file bytes (no model, no network), so they stay deterministic, live in the Tier 0 checks tier, never fail a run, and can be hidden with --no-sign\n[…]\nr thresholds stay internal. evolve doctor errors when the ideal exceeds or sits too close to checks.max_skill_lines.\n\nRefs: #27\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(checks): add non-blocking skill-quality signals",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T22:17:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "05993822453d0d044d5d32cff0f0ac6b8205140e",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.3.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-24T12:43:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9566ce6e9eef0d40b8df42654e6920d053984307",
"body": "The generated config reference is committed as docs/config/index.md (mkdocs\nindex-page convention), but README.md (twice) and AGENTS.md still referenced a\ndocs/config/configuration.md that no longer exists. Update both to the real\npath so the links resolve.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: point config reference links at docs/config/index.md",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T12:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d758a4bedb95b6c498b3ebecf79838beb6414492",
"body": "Render pymdownx.keys shortcuts as Data General 6053-style keycaps (teal modifier/named keys, royal-blue character keys). Give inline code a legible raised surface in dark mode, and stripe reference-table code chips by row through the four brand accents with matching neon text. codecolor.js gains the per-row table-striping pass.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "style(docs): keycap shortcuts and brand-tinted inline-code chips",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T12:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2752f77b93f56313965fe9f786d61918ba87cc0",
"body": "The Providers list conflated model vendors with agent CLIs. Split harnesses (Claude Code, Codex, Gemini, Cursor, Copilot, Antigravity) from providers (Anthropic, OpenAI, Google, Cursor), fix the doctor/models descriptions, and add a documentation call-to-action linking the docs site.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs(readme): separate harnesses from providers, add docs CTA",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T12:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9fc2f0bd97dc99eebbb9a6064bb6e96f9859e63",
"body": "Split combined shortcut rows onto their own lines and reword for clarity (\"Move left or right between panes\", \"Jump to top or bottom\", \"Collapse or expand the tree\"), grounded in the actual TUI key handlers.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: clarify and split the TUI keyboard-shortcut tables",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T12:05:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f7d111b6b4e8f919f0debad2ff726d8ba49840a",
"body": "Grow the Authoring evaluations section into a walkthrough: new Triggers, Behavioral evals, and How evaluations run pages, with real examples drawn from the golang plugin. Reframe the Overview as a roadmap, repoint the Assertions cross-link, and add the pages to the nav.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: add triggers, behavioral-eval, and execution authoring pages",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T12:05:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a201890d497c5048f6b7a3d02e3523fc02fdbb1",
"body": "Add a *.{md,html} override at printWidth 120 so prose and tables keep their width; the narrower base reflows the landing-page CSS in docs/stylesheets/extra.css and the home hero in overrides/home.html. Formatting only.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "chore(format): narrow base prettier width to 80, keep md/html at 120",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-24T12:05:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e560de1bc6d95a556d460e5c3bf83657db58ddc5",
"body": "- Add docs/evaluations/assertions.md: a reference for every assertion type\n (file_exists, file_absent, regex, not_regex, command, tool_call, llm) with a\n realistic example of each, the deterministic grading order, and the tri-state\n pass/fail/skip behavior.\n- Move authoring-evaluations.md to docs\n[…]\n the new path.\n- Modernize the markdownlint config: friendly rule names, and disable\n code-block-style so admonitions render.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: add eval assertions reference and restructure evaluations docs",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T18:20:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34a8885262e3514f71960cdc412861da3f3ab7ef",
"body": "Behavioral evals could only assert over an agent's final text and the\nworkspace filesystem, never *how* it reached its answer. Add a tool_call\nassertion that passes when the agent invoked a tool whose name matches a\nregex and, optionally, whose JSON-serialized arguments match a second\nregex. MCP too\n[…]\nhe previously-scaffolded ExecutionMetrics.{ToolCalls,\nTotalToolCalls} on eval results whenever the harness reports tool calls.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: add tool_call assertion to verify tool and MCP invocations",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T17:46:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6687789e2459a333bcf3706b7bdd933468e3754e",
"body": "The Rollup pane (Improvements / Regressions / Skills) truncated its rows at the\npane height, so a long Skills table hid everything past the fold. Give the pane\nits own scroll offset and the same dual vim+arrow navigation the Runs and Details\npanes already have: up/down (j/k), g/G top/bottom, ctrl+d/\n[…]\nane handlers (rollupKey/runsKey/detailsKey) to keep it\nunder the gocyclo threshold and mirror the existing execKey delegation.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): scroll the dashboard rollup pane",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T15:42:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9d7148a1d2a82a8105cc30ba97b883cfbd0c5a3",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-23T05:31:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd920b026ea208e6c39ec87fb69cbf8fb1f88147",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: checkout repo with lfs for docs",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T05:04:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f95bb8b84dd367c761baa6863c13a43e0e5442e",
"body": "The reusable CI workflow (github-workflows ci.yaml v2.0.0) uploads test results to Codecov from coverage/junit.xml, but `make test` only emitted coverage/cobertura-coverage.xml. The upload step therefore warned \"No files were found with the provided path: coverage/junit.xml\" and skipped.\n\nRun the su\n[…]\na bare `go test | …` pipe would swallow. gocover-cobertura still renders the profile as Cobertura XML for the coverage upload.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: emit JUnit test results for Codecov upload",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:51:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67c78d9e4bb1ddb692a84ffd9c7d9bffa1cf586a",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "style: format generated config examples",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70f79b8900363b0901ad139af47a92edf714c869",
"body": "The pinned dev CLIs sit in `tool (...)` directives, so every require\nentry in tools/go.mod is `// indirect`. Dependabot only updates direct\ndeps by default, so allow indirect ones too — otherwise the /tools\ngroup updates would never fire for the packages they exist to maintain.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "build(deps): update indirect deps in tools gomod group",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:34:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "276d7fafa16ac883ad8fb3a2084da8d2917f1f65",
"body": "The lint target invokes .bin/golangci-lint but only declared a\nnode_modules prerequisite, never go_tools (which builds that binary).\nLocal runs passed because .bin/golangci-lint was already present from a\nprior make fmt; CI's fresh checkout had no .bin, so make lint failed with\n'.bin/golangci-lint: not found'. Add the go_tools prerequisite, matching\nthe fmt target.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(make): build golangci-lint before linting",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:29:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50671ce707ade2c2a3453feb63a913b8e812a449",
"body": "Add a Zensical/Material site — landing page, getting-started, installation,\nauthoring guide, CLI and config references, and TUI guide — with a custom\ncyberdream theme under overrides/ and extra.css.\n\n- zensical.toml: nav, theme, and the markdown_extensions set with\n pymdownx.snippets and content ta\n[…]\ndecolor.js tints sh code fences with the brand accents\n- make docs renders the site; release.yaml publishes it to GitHub Pages\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(docs): publish a zensical documentation site",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:20:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb24c5ec14c19bd84aabae314ade0a1fe875c547",
"body": "The configuration reference is embedded into the docs site's config page\nthrough a pymdownx.snippets marker instead of standing alone.\n\n- Markdown() drops its '# Configuration' heading and is now a bare table\n fragment; the host page owns the heading\n- writeConfigDocs writes reference.md under docs\n[…]\ndrop the old configuration.md\n- TestMarkdownCoversSchema pins the new fragment contract (heading-less,\n table header present)\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor(configdoc): emit the config reference as an embeddable fragment",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:20:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc7780a7aa6c903498f6262c141a6d21afe8c692",
"body": "Pin the uv/Python toolchain for the documentation site (zensical + mike)\nand teach every ignore and lint surface about the generated output.\n\n- pyproject.toml, uv.lock, .python-version pin zensical and mike; drop the\n uv-bootstrap main.py\n- .gitignore / .golangci.yaml / .licenseignore / .markdownli\n[…]\n ignore the built /site/ and /.venv/, and let the authored\n docs/*.md be formatted again\n- dependabot: track the uv ecosystem\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: add zensical docs toolchain and ignore build output",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T04:20:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b17e76846826372a2a57fd78ccebd37bdc399ab1",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: add hombrew install",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T01:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46e4e08c2221083723624796d9d335db08f62bb4",
"body": "Add a shared evolveTitle() helper that draws EVOLVE with each letter bold in\nits own palette hue (blue, green, teal, pink, orange, and a new colPurple).\nUse it for the dashboard header and add the same wordmark to the top of the\nselection form, reserving header height so the panes stay within the window.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): render the EVOLVE wordmark in per-letter colour",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T01:30:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82afacccbf72816bff7dfbed4718c86ae8fabc1f",
"body": "Add an Interactive TUI section to the README covering the selection form\n(filter / harness / model / case panes, per-provider model toggles, and\nnavigation) and the live dashboard, embedding a 1200px-wide dashboard\nscreenshot. Commit the full-resolution captures as sources.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: document the interactive TUI with a dashboard screenshot",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T01:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c09b08845b20d2663da86d2b1d2a39e922f6a0d5",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: store PNG assets with Git LFS",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T01:30:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad6c545437629765234d458bc0b53104eb01d6f2",
"body": "- Add a glyph legend under the case tree, kept to a single row when it fits the\n pane (recomputed on resize) so the tree keeps usable height.\n- Let trigger text fill the pane and ellipsize only at the border instead of\n truncating at 70 runes.\n- Move CANCEL/RUN to a right-aligned, tab-navigable bu\n[…]\nirrored\n (Filters/Harnesses/Models green/teal/orange, tree/legend pink), with\n always-bright titles and border-only dimming.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): reclaim selection-form space and mirror dashboard styling",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-23T00:29:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27c5e1701c8b1ef07f97e90146b5c7299597cf86",
"body": "The config key was renamed to `models` in the harness/provider split; this\nupdates the stragglers — stale-results comments and CLI output, the report\nexcluded-models note and flag help (and the regenerated report docs), and the\nREADME config list — to the `models` restriction. No behavior change beyond the\nuser-facing copy.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor: drop leftover default_models references",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T21:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba8ee34addff2d791b9cf51281900613dd9d2fa8",
"body": "Rewrite the interactive selection form as a four-region screen — filters\n(new/modified/failed), harnesses, models, and a plugin -> skill -> case tree —\nbacked by a new plan.Session that owns all filter and selection state. The form\nnavigates and routes each key press to a Session receiver, then rend\n[…]\ns and force-on/off + auto-all/some/none glyphs.\n- Update AGENTS.md/DESIGN.md for the harness/model split and the Session form.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): drive the selection form from a stateful plan.Session",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T21:51:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34d63079bb16514e9883d2c4af2b0f641a3f9b25",
"body": "Signed-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: update local devx",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T21:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aadbfaf6009622ba05c2cccd430f637f9f31d5e8",
"body": "Replace the single internal/provider abstraction with internal/harness (the\nagent CLIs that drive models) and internal/model (model vendors, the canonical\nmodel registry, pricing, and the vendor token-counting clients). Evals now run\nonce per model via a chosen harness, never once per harness.\n\n- Ad\n[…]\nunder the\ncopilot/cursor/antigravity providers are re-keyed to their canonical vendor\nmodel (anthropic/*, openai/*, google/*).\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor(provider)!: split provider into harness, provider, and model",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T20:51:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "126fa16771f1e7fb3b983d46fab78f84286edabe",
"body": "Plan.Filters built each model's execution filter from only the queued\ncases. When a skill queued a case in one tier but none in the other (an\neval-only skill: wire-release-vanity queued, no triggers), it set\nSkills[skill]=true and filled Evals[skill] but left Triggers with no entry\nfor that skill. A\n[…]\n-nil set already means 'include the\nskill, none of its cases'). The bug was symmetric; this covers the\ntriggers-only case too.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(plan): restrict both tiers when a skill is queued via one",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T20:51:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8743990a860ad46a9ff710538821a9091702d98e",
"body": "renderRuns and renderLeftBody rendered every execLog entry / tree node each frame,\nthen scrollWindow kept only the ~7 visible. With a large run matrix that is\nhundreds-to-thousands of lipgloss-styled rows ~10x/second, since the spinner tick\nrecomputes the whole View(). A live CPU profile of run all \n[…]\nt 1728 cases and is now flat across plan size (O(visible), not O(cases)).\nBenchmarkRenderRuns/RenderLeft guard the regression.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "perf(tui): render only on-screen dashboard rows",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T16:39:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1d00b60df852e4754ed3164d5ddb78387561a23",
"body": "--profile=cpu,memory (or all; repeatable or comma-separated via StringSlice)\nwrites pprof profiles for the run. Profiling starts in PersistentPreRunE so the\nCPU profile brackets the command's work, and finalizes in main() so it fires on\nsuccess and failure alike (a RunE error skips PostRun). The new\n[…]\nme/pprof out of cmd/evolve and makes the supported set one list\nto extend. Hidden, so it produces no --help or make docs diff.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(cli): add hidden --profile flag for cpu/memory pprof",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T16:39:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f4ca17ac93f1c1f8f3e7a8dcd021e6491ca8949",
"body": "The runner drains each subprocess's stdout line by line and hands every line\nto the provider's ScanLine, across --jobs concurrent runs. The JSON-unmarshalling\nproviders (Anthropic/Google/Cursor) cost ~11x the substring ones (OpenAI/Copilot/\nAntigravity) per line. BenchmarkScanLine/ScanRun bound that parent-side cost, and\nthe make bench target wires -bench/-benchmem (BENCH_FLAGS threads -cpuprofile).\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "test(perf): benchmark provider line scanning; add make bench",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T16:39:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1afe7ead572f0b03be105c784bc53b93f79f6570",
"body": "… dashboard share\n\nExtract a new internal/plan package as the single source of what runs, for which\nmodels, in what order. It holds the structural types (UnitRef, Kind, Status,\nMode, ItemMetrics, CaseRef, Filter, Tiers, SkillCatalog), applicability and prior\nmetrics, and the canonical model: Plan (o\n[…]\n(plugin -> skill -> model\n-> all triggers -> all evals, authored order). Plain output and the e2e golden\nfiles are unaffected.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor(plan): own run planning in one package the form, engine, and…",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T15:50:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67d84ee8a0b797b35c96ad6763a8077dc865ba98",
"body": "Reserve the run spinner for groups and cases executing right now. A group is\n\"running\" only when one of its cases is in flight, so a finished group no\nlonger spins while its per-unit \"finished\" event is still in flight, and a\nnot-yet-started queued row no longer borrows the spinner.\n\nRows selected t\n[…]\nstatus, which can lag the last finished case (or never arrive for an empty\nunit whose cases are all skipped for the provider).\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(tui): spin only running rows; mark queued rows pending",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T14:09:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4024d6c3efd6addb7887c102c262890754f3e554",
"body": "A queued case used to render empty/pending until it produced a result this session,\nso a partial rerun looked like its passing cases were being skipped. Now every case\nis seeded from the last committed run: a queued case shows its prior result (dimmed)\nand counts as pending until its live result lan\n[…]\nounts.\n\nThe run progress bar still tracks only this sessions queued work (liveDone), so\nseeded prior results never inflate it.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): seed queued rows from prior results and update them live",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T13:47:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b18a33645c78dc53a02749a3e220158ddcf40ea7",
"body": "…hemas\n\nEvalCaseMetrics gains AssertPassed/AssertTotal, derived from each results grade\nsummary, so a preserved eval row can show its Pass/Tot ratio — the compact prior\nmetrics previously carried only the pass rate.\n\nBumps the schema to 4 and changes LoadDir from discarding a mismatched file to\nupgr\n[…]\nng. Only an unreadable file or one written by a newer evolve\nstill resets. The upgraded file is rewritten on the next SaveDir.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(results): record eval assertion counts and auto-upgrade older sc…",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T13:47:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78e19a8813b21930d810ba7eb656ddd0d8f4342b",
"body": "A --failed/--new/--modified run only re-executes the cases with a gap, so the\ndashboard never received events for the rest and left them sitting \"pending\" —\nwhich reads as if passing cases were being skipped.\n\nThe dashboard now plans every on-disk unit (deleted cases drop out) and, for\neach case the\n[…]\ny the queued set (this sessions actual\nwork); the per-skill/model rollups fold prior and fresh cases together for true\ntotals.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): show prior results for cases a partial run does not re-run",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T13:05:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fbc3e499c1f43bad6db1c7f3e7a8548bb006a534",
"body": "In-pane headings shared one yellow headerStyle. Split it into per-pane\nheading styles drawn from the same accent constants the panel borders use,\nso each heading reads as belonging to its pane: Execution pink, Rollup\ngreen, Details orange. The Runs pane has no heading.\n\nSigned-off-by: Deavon M. McCaffery <dmccaffery@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(tui): tint pane headings with each pane's accent color",
"author_name": "Deavon M. McCaffery",
"author_login": "dmccaffery",
"committed_at": "2026-06-22T12:03:29Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 8,
"commits_last_year": 168,
"latest_release_at": "2026-07-03T22:24:44Z",
"latest_release_tag": "v0.5.1",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 7,
"days_since_latest_release": 26,
"mean_days_between_releases": 3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/bitwise-media-group/evolve",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/bitwise-media-group/evolve",
"is_deprecated": false,
"latest_version": "v0.6.0",
"repository_url": "https://github.com/bitwise-media-group/evolve",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T17:01:27Z",
"latest_version_yanked": null,
"days_since_latest_publish": 12
},
{
"name": "evolve",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "pypi",
"matches_repo": false,
"registry_url": "https://pypi.org/project/evolve/",
"is_deprecated": false,
"latest_version": "1.5",
"repository_url": "https://github.com/JamesHabben/evolve",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 43,
"first_published_at": "2016-03-02T03:34:30.839404Z",
"latest_published_at": "2016-03-02T03:34:30.839404Z",
"latest_version_yanked": null,
"days_since_latest_publish": 3802
}
]
},
"popularity": {
"forks": 5,
"stars": 4,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-06-12",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-28",
"count": 1
},
{
"date": "2026-06-29",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"internal/web/ui/tsconfig.json"
],
"toolchain_manifests": [
"e2e/go.mod",
"go.mod"
],
"largest_source_bytes": 37392,
"source_files_sampled": 244,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 9881
},
"dependencies": {
"manifests": [
"e2e/go.mod",
"go.mod",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "pymdown-extensions",
"direct": false,
"version": "10.21.3",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-9xwg-3r6f-jcx2"
],
"fixed_version": "11.0.0",
"advisory_count": 1,
"oldest_advisory_days": 6
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5942"
],
"fixed_version": "0.56.0",
"advisory_count": 1,
"oldest_advisory_days": 15
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 15
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 2,
"moderate": 1
},
"advisory_count": 3,
"affected_count": 3,
"assessed_count": 220,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "charm.land/bubbles/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.1"
},
{
"name": "charm.land/bubbletea/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.8"
},
{
"name": "charm.land/lipgloss/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.5"
},
{
"name": "github.com/charmbracelet/x/ansi",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.11.7"
},
{
"name": "github.com/hashicorp/go-version",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v6",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v6.0.2"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "github.com/spf13/pflag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.10"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "github.com/tailscale/hujson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260302212456-ecc657c15afd"
},
{
"name": "go.opentelemetry.io/contrib/bridges/otelslog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
},
{
"name": "go.opentelemetry.io/contrib/exporters/autoexport",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.69.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/stdout/stdoutlog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/stdout/stdoutmetric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/log",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "go.opentelemetry.io/otel/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/log",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.yaml.in/yaml/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.4"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.45.0"
},
{
"name": "zensical",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.0.50"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "charm.land/bubbles/v2",
"direct": true,
"version": "v2.1.1",
"ecosystem": "go"
},
{
"name": "charm.land/bubbletea/v2",
"direct": true,
"version": "v2.0.8",
"ecosystem": "go"
},
{
"name": "charm.land/lipgloss/v2",
"direct": true,
"version": "v2.0.5",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/ansi",
"direct": true,
"version": "v0.11.7",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-version",
"direct": true,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v6",
"direct": true,
"version": "v6.0.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": true,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": true,
"version": "v1.0.10",
"ecosystem": "go"
},
{
"name": "github.com/spf13/viper",
"direct": true,
"version": "v1.21.0",
"ecosystem": "go"
},
{
"name": "github.com/tailscale/hujson",
"direct": true,
"version": "v0.0.0-20260302212456-ecc657c15afd",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/bridges/otelslog",
"direct": true,
"version": "v0.19.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/exporters/autoexport",
"direct": true,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/stdout/stdoutlog",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/stdout/stdoutmetric",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/stdout/stdouttrace",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/log",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk/log",
"direct": true,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": true,
"version": "v3.0.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": true,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": true,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "zensical",
"direct": true,
"version": "0.0.50",
"ecosystem": "pypi"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v5",
"direct": false,
"version": "v5.0.3",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/colorprofile",
"direct": false,
"version": "v0.4.3",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/ultraviolet",
"direct": false,
"version": "v0.0.0-20260703014108-f5a850f9c2b7",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/term",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/termios",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/windows",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/displaywidth",
"direct": false,
"version": "v0.11.0",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/uax29/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/cpuguy83/go-md2man/v2",
"direct": false,
"version": "v2.0.6",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.29.0",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/lucasb-eyer/go-colorful",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.24",
"ecosystem": "go"
},
{
"name": "github.com/muesli/cancelreader",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.4",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": false,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.67.5",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/otlptranslator",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.4.7",
"ecosystem": "go"
},
{
"name": "github.com/russross/blackfriday/v2",
"direct": false,
"version": "v2.1.0",
"ecosystem": "go"
},
{
"name": "github.com/sagikazarmark/locafero",
"direct": false,
"version": "v0.11.0",
"ecosystem": "go"
},
{
"name": "github.com/sourcegraph/conc",
"direct": false,
"version": "v0.3.1-0.20240121214520-5f936abd7ae8",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": false,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/subosito/gotenv",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/xo/terminfo",
"direct": false,
"version": "v0.0.0-20220910002029-abceb7e1c41e",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/bridges/prometheus",
"direct": false,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/prometheus",
"direct": false,
"version": "v0.66.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260526163538-3dc84a4a5aaa",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260526163538-3dc84a4a5aaa",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.82.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/compat-data",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/core",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/generator",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-annotate-as-pure",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-compilation-targets",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-globals",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-imports",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-transforms",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-plugin-utils",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-string-parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-option",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helpers",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-jsx",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-transform-react-jsx",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-transform-react-jsx-development",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/template",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/traverse",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@emnapi/core",
"direct": false,
"version": "1.11.1",
"ecosystem": "npm"
},
{
"name": "@emnapi/runtime",
"direct": false,
"version": "1.11.1",
"ecosystem": "npm"
},
{
"name": "@emnapi/wasi-threads",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.13",
"ecosystem": "npm"
},
{
"name": "@jridgewell/remapping",
"direct": false,
"version": "2.3.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.31",
"ecosystem": "npm"
},
{
"name": "@napi-rs/wasm-runtime",
"direct": false,
"version": "1.1.6",
"ecosystem": "npm"
},
{
"name": "@oxc-project/types",
"direct": false,
"version": "0.138.0",
"ecosystem": "npm"
},
{
"name": "@preact/preset-vite",
"direct": false,
"version": "2.10.5",
"ecosystem": "npm"
},
{
"name": "@prefresh/babel-plugin",
"direct": false,
"version": "0.5.3",
"ecosystem": "npm"
},
{
"name": "@prefresh/core",
"direct": false,
"version": "1.5.10",
"ecosystem": "npm"
},
{
"name": "@prefresh/utils",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "@prefresh/vite",
"direct": false,
"version": "2.4.12",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-android-arm64",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-darwin-arm64",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-darwin-x64",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-freebsd-x64",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-arm-gnueabihf",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-arm64-gnu",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-arm64-musl",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-ppc64-gnu",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-s390x-gnu",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-x64-gnu",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-x64-musl",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-openharmony-arm64",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-wasm32-wasi",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-win32-arm64-msvc",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-win32-x64-msvc",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@rolldown/pluginutils",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "@rollup/pluginutils",
"direct": false,
"version": "4.2.1",
"ecosystem": "npm"
},
{
"name": "@rollup/pluginutils",
"direct": false,
"version": "5.4.0",
"ecosystem": "npm"
},
{
"name": "@tybys/wasm-util",
"direct": false,
"version": "0.10.3",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.9",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "22.20.0",
"ecosystem": "npm"
},
{
"name": "babel-plugin-transform-hook-names",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "baseline-browser-mapping",
"direct": false,
"version": "2.10.41",
"ecosystem": "npm"
},
{
"name": "boolbase",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.28.4",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30001800",
"ecosystem": "npm"
},
{
"name": "convert-source-map",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "css-select",
"direct": false,
"version": "5.2.2",
"ecosystem": "npm"
},
{
"name": "css-what",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "detect-libc",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "dom-serializer",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "domelementtype",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "domhandler",
"direct": false,
"version": "5.0.3",
"ecosystem": "npm"
},
{
"name": "domutils",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.5.384",
"ecosystem": "npm"
},
{
"name": "entities",
"direct": false,
"version": "4.5.0",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "estree-walker",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "fdir",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "gensync",
"direct": false,
"version": "1.0.0-beta.2",
"ecosystem": "npm"
},
{
"name": "he",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "jsesc",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "json5",
"direct": false,
"version": "2.2.3",
"ecosystem": "npm"
},
{
"name": "kolorist",
"direct": false,
"version": "1.8.0",
"ecosystem": "npm"
},
{
"name": "lightningcss",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-android-arm64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-darwin-arm64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-darwin-x64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-freebsd-x64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm-gnueabihf",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm64-gnu",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm64-musl",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-x64-gnu",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-x64-musl",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-win32-arm64-msvc",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-win32-x64-msvc",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "magic-string",
"direct": false,
"version": "0.30.21",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.8",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "nanoid",
"direct": false,
"version": "3.3.16",
"ecosystem": "npm"
},
{
"name": "node-html-parser",
"direct": false,
"version": "6.1.13",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "2.0.50",
"ecosystem": "npm"
},
{
"name": "nth-check",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "4.0.5",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "8.5.23",
"ecosystem": "npm"
},
{
"name": "preact",
"direct": false,
"version": "10.29.3",
"ecosystem": "npm"
},
{
"name": "rolldown",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "6.3.1",
"ecosystem": "npm"
},
{
"name": "simple-code-frame",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.7.6",
"ecosystem": "npm"
},
{
"name": "source-map-js",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "stack-trace",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "tinyglobby",
"direct": false,
"version": "0.2.17",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "5.9.3",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "6.21.0",
"ecosystem": "npm"
},
{
"name": "update-browserslist-db",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "vite",
"direct": false,
"version": "8.1.3",
"ecosystem": "npm"
},
{
"name": "vite-plugin-singlefile",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "vite-prerender-plugin",
"direct": false,
"version": "0.5.13",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "zimmerframe",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "click",
"direct": false,
"version": "8.4.1",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "deepmerge",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "evolve",
"direct": false,
"version": "0.2.1",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "markdown",
"direct": false,
"version": "3.10.2",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "pymdown-extensions",
"direct": false,
"version": "10.21.3",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": false,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "tomli",
"direct": false,
"version": "2.4.1",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 220,
"direct_count": 26,
"indirect_count": 194
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 66,
"open_issues": 4,
"closed_ratio": 0.75,
"closed_issues": 12,
"closed_unmerged_prs": 15
},
"bus_factor": 1,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "dmccaffery",
"commits": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/1803684?v=4"
},
{
"type": "User",
"login": "admin-bitwise",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/270485327?v=4"
},
{
"type": "User",
"login": "deanhigh",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/896630?v=4"
},
{
"type": "User",
"login": "johankees",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/22237801?v=4"
},
{
"type": "User",
"login": "tiffanywang3",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/5248989?v=4"
}
],
"contributors_sampled": 5,
"top_contributor_share": 0.846
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"add-to-project.yaml",
"ci.yaml",
"dependabot-merge.yaml",
"merge-notice.yaml",
"merge-review-ack.yaml",
"merge.yaml",
"release.yaml",
"security.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 6,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 8,
"reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d66e4a39f2e7e24f96161e3c917e6233f67f59e4",
"ran_at": "2026-07-30T17:09:12Z",
"aggregate_score": 8.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-30T16:45:49Z",
"oldest_open_prs": [
{
"number": 92,
"created_at": "2026-07-17T02:54:59Z",
"last_comment_at": "2026-07-17T02:55:10Z",
"last_comment_author": "github-actions"
},
{
"number": 98,
"created_at": "2026-07-25T04:03:07Z",
"last_comment_at": "2026-07-26T09:55:08Z",
"last_comment_author": "dmccaffery"
}
],
"last_merged_pr_at": "2026-07-26T09:53:45Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 27,
"created_at": "2026-06-24T13:56:23Z",
"last_comment_at": "2026-06-28T14:14:11Z",
"last_comment_author": "dmccaffery"
},
{
"number": 82,
"created_at": "2026-07-13T12:50:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 84,
"created_at": "2026-07-14T23:41:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 88,
"created_at": "2026-07-15T06:27:01Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/bitwise-media-group/evolve",
"host": "github.com",
"name": "evolve",
"owner": "bitwise-media-group"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"security": 86,
"vitality": 75,
"community": 50,
"governance": 60,
"engineering": 84
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 168,
"human_commit_share": 0.78,
"days_since_last_push": 4,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "168 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 168
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"releases_count": 8,
"latest_release_tag": "v0.5.1",
"releases_from_tags": false,
"days_since_latest_release": 26,
"mean_days_between_releases": 3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "8 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 8
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 26 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 26
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 50,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"forks": 5,
"stars": 4,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 5,
"top_contributor_share": 0.846
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 85% of commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 85
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "5 contributors",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 5
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"merged_prs": 66,
"open_issues": 4,
"closed_issues": 12,
"issue_closed_ratio": 0.75,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "75% of issues closed",
"points": 35.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 75
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "66/81 decided PRs merged",
"points": 31.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 66,
"decided": 81
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"followers": 2,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "bitwise-media-group",
"public_repos": 15,
"account_age_days": 83
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of bitwise-media-group",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "bitwise-media-group"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "15 public repos, account ~0 yr old",
"points": 9.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 15
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/bitwise-media-group/evolve"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 12
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 12 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 12
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "9 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 9
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 84,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"claude-code",
"cursor",
"gemini",
"agent-evals"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 86,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 8.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 220 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 220
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 3,
"affected_packages": 3,
"assessed_packages": 220,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1, unknown 2",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 220,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 90,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 9881
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "78 of 78 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 78,
"sampled": 78
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json",
"uv.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"internal/web/ui/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"e2e/go.mod",
"go.mod"
],
"dependency_bot_commit_share": 0.16
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "internal/web/ui/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "internal/web/ui/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "16 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 16,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 37392,
"source_files_sampled": 244,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/244 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 244,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"pypi package 'evolve' points at a different repository (https://github.com/JamesHabben/evolve); excluded from ecosystem scoring",
"deps.dev does not index pypi:evolve@1.5; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-30T17:09:32.216881Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bitwise-media-group/evolve.svg",
"full_name": "bitwise-media-group/evolve",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit bitwise-media-group/evolve teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
