drolosoft/immich-photo-manager erreicht einen Gesundheitsindex von 61 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (82/100) ab, am schwächsten bei Community & Adoption (40/100). Zuletzt vor 3 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
61
gesamt / 100
Mittel
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
61
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
1 Follower11 öffentliche Reposseit März 2026Drolosoft
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Release-Rhythmus — ein Release etwa alle 23,1 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
5
latest_release_tag
v1.3.1
releases_from_tags
nein
days_since_latest_release
10
mean_days_between_releases
23,1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
29
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von pypi:immich-photo-manager@1.3.0 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 29 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 8 ⇿
0Sterne
8Forks
5Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 1Minor 3Patch 1
OpenSSF Scorecard 4.5 / 10
4.5Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-26 22:51 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Abhängigkeits-Advisories 0
Die Installation von pypi:immich-photo-manager@1.3.0 zieht 29 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"albums",
"claude",
"claude-plugin",
"cleanup",
"duplicates",
"gallery",
"geolocation",
"immich",
"mcp",
"mcp-server",
"metadata",
"photo-management",
"photos",
"self-hosted",
"immich-plugin",
"python"
],
"is_fork": false,
"size_kb": 15696,
"has_wiki": true,
"homepage": "https://drolosoft.com/immich-photo-manager.html?lang=en",
"languages": {
"HTML": 562101,
"Shell": 6221,
"Python": 112969,
"JavaScript": 8301
},
"pushed_at": "2026-07-23T12:50:28Z",
"created_at": "2026-03-22T17:26:10Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T06:47:59Z",
"description": "📸🧹🗺️ MCP server for intelligent photo management with Immich — search, curate geographic albums, clean up libraries, and publish galleries",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "HTML",
"significant_languages": [
"HTML",
"Python"
]
},
"owner": {
"blog": "https://drolosoft.com",
"name": "Drolosoft",
"type": "Organization",
"login": "drolosoft",
"company": "Drolosoft",
"location": "Canary Islands, Spain",
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/270151826?v=4",
"created_at": "2026-03-22T15:31:58Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 126
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-07-15T23:00:35Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-05-18T08:31:36Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-26T19:25:20Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-16T12:19:58Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-04-14T18:06:32Z"
}
],
"recent_commits": [
{
"oid": "07688a73c1b98e447a3086558251bed02258beb3",
"body": "Whole-tree `ruff check .` is now clean. Split one-line imports, drop\nunused imports, remove f-prefixes on placeholder-less strings, and\nnarrow two bare `except:` clauses to the exceptions actually raised\n(subprocess.TimeoutExpired; json/KeyError/TypeError on album parsing).\nNo behavior change — helper scripts are lint-only touched.",
"is_bot": false,
"headline": "chore: fix ruff lint errors in root and scripts helpers (#7)",
"author_name": "Juan Andrés Moreno Rubio",
"author_login": "juanatsap",
"committed_at": "2026-07-23T12:50:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ab4636036829c1514d446ba1e1d7532f50c2a6a",
"body": "The HTTP-mode Host allowlist (MCP_ALLOWED_HOSTS) passes transport_security\nto FastMCP, an argument only present since mcp 1.9. The old >=1.0.0 floor\nlet pip resolve an older mcp that crashes with TypeError at startup.",
"is_bot": false,
"headline": "chore: require mcp>=1.9 for transport_security support (#6)",
"author_name": "Juan Andrés Moreno Rubio",
"author_login": "juanatsap",
"committed_at": "2026-07-23T12:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff5cea31a5477ed2ca5420efad45d1bb35d2f4c0",
"body": "* Updated claude plugin install instructions\n\n* Added setup script to setup doc",
"is_bot": false,
"headline": "Updated claude plugin install instructions (#5)",
"author_name": "Tom Clancy",
"author_login": "tclancy",
"committed_at": "2026-07-23T12:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5c1bdfa601af13837e86231f444b0e5ffb16513",
"body": "… mode (#4)\n\nIn HTTP mode behind a reverse proxy, every MCP request fails with\n421 Misdirected Request (\"Invalid Host header: <domain>\"): the MCP\nPython SDK auto-enables DNS-rebinding protection when the bind host is\nlocalhost, accepting only 127.0.0.1/localhost/[::1] Host headers, and\nthe FastMCP c\n[…]\nalhost defaults)\nallowed, and matching https:// origins allowed. Unset, behavior is\nunchanged.\n\nCo-authored-by: bradhgq <bradhuang0723@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: MCP_ALLOWED_HOSTS env var to allow proxied Host headers in HTTP…",
"author_name": "brad",
"author_login": "bradhgq",
"committed_at": "2026-07-23T12:28:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f3dde09a5d6013744113885598478bb531533f1b",
"body": null,
"is_bot": false,
"headline": "chore: drop unused import; ignore .venv",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a6806b9c53478bcec0e5ad97000212cf5204a75",
"body": "The release workflow re-runs the suite, builds, refuses to ship an sdist\ncontaining anything beyond package sources, publishes to PyPI via OIDC\ntrusted publishing, and attaches artifacts to the GitHub release.",
"is_bot": false,
"headline": "ci: lint+test on push/PR, gated trusted-publisher release on tags",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8947512d3ea915859d0efce1413a7dde6d863f3",
"body": "The URL and API key were interpolated into python3 -c source and a JSON\nheredoc — a quote in either could execute arbitrary Python and corrupted\nevery generated config. All values now reach Python via environment\nvariables with the source in quoted heredocs; the key is read without\necho, and the final connection test no longer aborts the setup under\nset -e on machines without httpx.",
"is_bot": false,
"headline": "security: setup-mcp.sh treats user input as data, never code",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6003a945067196a80b855ed933d7a6afa5d284c0",
"body": "- update_credentials constructed ImmichClient() through env vars, but an\n existing config.json takes precedence over env — so any second rotation\n validated and hot-swapped the OLD credentials while reporting success.\n ImmichClient now accepts explicit base_url/api_key that bypass the\n override,\n[…]\ns no edits).\n- The startup connectivity warning printed to stdout, which carries\n JSON-RPC under the stdio transport; diagnostics now go to stderr.\n\nEach fix landed against a failing regression test.",
"is_bot": false,
"headline": "fix: credential rotation, edit-preserving rotation, stderr diagnostics",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d562c88cf96d967f579659cc05ec9b1bbf42cb2c",
"body": "The suite mocks HTTP with respx and stubs the client — no Immich\ninstance needed, so it runs anywhere including CI.",
"is_bot": false,
"headline": "test: offline pytest scaffolding and dev dependencies",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebdd39c693e4fac4e21105d5b9f39769ad41a89d",
"body": "Skills documented capabilities the MCP layer never had: GPS radius\nsearch params, asset-search-by-person, dimension-based screenshot\nfiltering, a dryRun flag, and eleven immich_*-prefixed tool names.\nEvery strategy is rewritten around what the 50 tools actually do:\ncity/country text search, CLIP queries, client-side filtering of\nget_map_markers output, taken_after/taken_before windows,\ndelete_assets(force=False) trash semantics, and the real\nmerge_people(person_id, merge_ids) signature.",
"is_bot": false,
"headline": "docs: align skills, commands, and references with real tool capabilities",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T16:02:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85f1fbe2e5ae5d2059aa052726570d03abc468ca",
"body": null,
"is_bot": false,
"headline": "docs: add CHANGELOG",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "727b813b84fae671fcd4716649c8b11cbac43b62",
"body": "env= replaced the whole environment (no PATH), so the child python3\nresolved to whatever the OS found first, never the interpreter running\nthe test.",
"is_bot": false,
"headline": "fix: test-mcp.py inherits the environment and uses sys.executable",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5713c840d9b7facc189028134e1b3c7e449ff3f7",
"body": null,
"is_bot": false,
"headline": "chore: remove internal maintenance files from the repo",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12e8d741571bb404296b55281a662cf6735fe439",
"body": "plugin.json/marketplace.json said 1.2.0/36 tools, SECURITY.md supported\n1.0.x, install guide showed 1.1.0, README badge linked v1.0.0.",
"is_bot": false,
"headline": "chore: sync versions and counts — one version, 50 tools, 12 skills",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9c6e17c7783739fbc391fd7c7fb8eb8a5356965",
"body": "The 1.3.0 sdist was built from the full working tree. Hatchling now\nonly-includes src/immich_mcp_server + README/LICENSE/SECURITY, and the\npackage exposes __version__.",
"is_bot": false,
"headline": "security: restrict sdist to package sources; bump to 1.3.1",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d28482f0132da4bef336c8cd306821db9ecb6a73",
"body": null,
"is_bot": false,
"headline": "chore: add superpowers, outputs, settings to gitignore",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-20T13:05:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb3b4c49563d666b4361ca0f4a6eb56a8a220cdb",
"body": "- Add upper bounds on deps: httpx<1.0, mcp<2.0, uvicorn<1.0\n (prevents broken future releases from auto-installing)\n- Change HTTP default host from 0.0.0.0 to 127.0.0.1\n (prevents unauthenticated network exposure; set MCP_HOST=0.0.0.0\n explicitly if you need remote access)",
"is_bot": false,
"headline": "security: cap dependency versions + bind HTTP to localhost by default",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-20T11:23:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de697d8eb6854ed22270b18c4dde6480d53280de",
"body": "The uvx PR (#3) changed MCP_TRANSPORT default from http to stdio.\nThis breaks existing systemd/launchd/Docker deployments that rely\non the http default.\n\nFix: two entry points, one shared implementation.\n- uvx console script (main) → defaults to stdio\n- python -m invocation (__main__) → defaults to http (backward compat)\n- MCP_TRANSPORT env var overrides both, as before.\n\nAlso updates pyproject.toml version from 1.1.0 to 1.3.0.",
"is_bot": false,
"headline": "fix: preserve backward compat for existing deployments",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-20T11:20:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41d00def97b2e171a8ec3b2ce981334e46b2a91c",
"body": "Add uvx entry point for MCP server",
"is_bot": false,
"headline": "Merge pull request #3 from kirel/codex-uvx-mcp-server",
"author_name": "Juan Andrés Moreno Rubio",
"author_login": "juanatsap",
"committed_at": "2026-05-20T11:13:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a46b7ca7f598e78c21787220973e57557da7354",
"body": null,
"is_bot": false,
"headline": "Add uvx entry point for MCP server",
"author_name": "Daniel Kirsch",
"author_login": "kirel",
"committed_at": "2026-05-19T21:10:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6132abb6fcb7cf6910e9d52b419653975b588c7e",
"body": null,
"is_bot": false,
"headline": "docs: rename to 🦙 Glama Score",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-19T06:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b8992023f07a6ef0c2d41512416e4659c6ca3a",
"body": null,
"is_bot": false,
"headline": "docs: add Glama section with card badge before Contributing",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-19T06:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b96bea648d4665d2644c6afb90b333f94dbe926",
"body": null,
"is_bot": false,
"headline": "docs: move Glama card badge below tagline, keep score badge in top row",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-19T06:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca84062ecb7d4159036cca3fb9d0d00e07474596",
"body": null,
"is_bot": false,
"headline": "docs: remove macOS/Linux badges — covered by Glama card",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-18T14:45:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4deab2ce034ccf269e9baec2f0a67a8f3adaf88",
"body": null,
"is_bot": false,
"headline": "docs: add Glama card badge to README",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-18T14:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b633f71f1fe7c4fd0dab013fc3b1a3691de38812",
"body": null,
"is_bot": false,
"headline": "docs: add macOS + Linux badges",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T14:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c54694ef8ff3d1fff36082753122f8ab4d9775c",
"body": null,
"is_bot": false,
"headline": "docs: improve all 50 tool descriptions for Glama TDQS score",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T13:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3c0c18d2dbcc89bfad0789b95ba13e6eb0c0f1f",
"body": "…n, error handling, dedup collision",
"is_bot": false,
"headline": "fix: QA audit — Linux compat, symlink security, empty input validatio…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T13:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2561afcb681b18c675506e617ff8e4c1a2745031",
"body": null,
"is_bot": false,
"headline": "assets: new brain+photos icon",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T11:56:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a30b6a0d6a927d3c535b1240e448285c3786010",
"body": "… on Immich v2.7",
"is_bot": false,
"headline": "fix: list_assets uses POST /search/metadata — GET /assets returns 404…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T11:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c78d2fb94a21252d63006f2f8ced1e068a25383",
"body": null,
"is_bot": false,
"headline": "docs: update tool count to 50, add tags/upload/shared link documentation",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T11:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4030f7dc1bf28299ac4e201f5c80ddea6185d59a",
"body": null,
"is_bot": false,
"headline": "feat: add shared link get/update/delete — full CRUD",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bb1422dfb9b328555b721dcabef7f69b254790b",
"body": null,
"is_bot": false,
"headline": "feat: add list_assets — filter by favorites, archived, trashed, type",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57ded29cb189c85bc75ed833fa128fdf357ac329",
"body": null,
"is_bot": false,
"headline": "feat: add upload_asset — 25MB limit, extension filter, optional album",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:57:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38b77e4ca2d63e6135184244522904051f03a105",
"body": null,
"is_bot": false,
"headline": "feat: add tags — 7 client methods + 7 MCP tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "317ae25c82ce765b68212865a53fdd088ccbbbc3",
"body": "- README: add bulk rotation to Highlights and comparison table\n- README: update tool count (36 → 38) and skill count (11 → 12)\n- SKILLS.md: add Rotate Photos as skill #12 with workflow and behavior docs",
"is_bot": false,
"headline": "docs: add bulk rotation to README, SKILLS.md, and comparison table",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-07T17:40:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ad77ac328e8c5e31cc1b3989a3e08ac80569b3d",
"body": "Two new MCP tools: rotate_assets and revert_asset_edits.\n\n- Rotate by album or asset IDs (90/180/270 degrees)\n- Non-destructive: uses Immich edits API, originals untouched\n- Rotation accumulates across calls (90+90=180, 360=reverted)\n- Thumbnails served rotated via ?edited=true\n- Revert removes all edits cleanly (isEdited returns to false)\n- New skill: rotate-photos with full workflow documentation\n- MCP-TOOLS.md updated (36 → 38 tools)",
"is_bot": false,
"headline": "feat: add bulk photo rotation and revert tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-07T17:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "492afc4b03097948a1b353804de8d00fd4133d00",
"body": "marketplace.json, GETTING-STARTED.md, and demo-script.md still\nreferenced the pre-v1.2.0 count of 22 tools. Updated to 36 to\nmatch the actual tool count after people, trash, and duplicate\ntools were added.",
"is_bot": false,
"headline": "docs: update stale tool counts from 22 to 36 for v1.2.0",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-06T18:44:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d2cd2c264536a8737625ef0878813ba9eb2ac3d",
"body": null,
"is_bot": false,
"headline": "docs: update 3 skills to use v1.2.0 people, trash & duplicate tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:52:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40caf115eaedc8b415db764add07ae8dd4a79d5f",
"body": null,
"is_bot": false,
"headline": "docs: add 14 new tools to MCP-TOOLS.md reference",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b5d957d7fac9ab0acb50e670c39bb6e2c035a98",
"body": null,
"is_bot": false,
"headline": "docs: update README for v1.2.0 (36 tools, new capability groups)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62bb9e33fcd64b9fc9ca80efe51331d36612a11a",
"body": null,
"is_bot": false,
"headline": "chore: bump version to v1.2.0",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:43:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e1189a4920b368c5b5b40644b36e536969de903",
"body": null,
"is_bot": false,
"headline": "feat: add duplicate detection tools (2 tools)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:43:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d261aaedc9e4ef0a983ba25c97477ce87d439c93",
"body": "Add delete_assets, empty_trash, restore_trash, and restore_assets — client methods and MCP tools for trash management.",
"is_bot": false,
"headline": "feat: add trash & deletion tools (4 tools)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:42:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fd93b417a2aa226c4b6408bcb3a80824e7eae0f",
"body": null,
"is_bot": false,
"headline": "feat(tools): add people & faces MCP tools (8 tools)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:41:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bebde5e7b1fd66fe36b9ec809024af17ec7f9347",
"body": null,
"is_bot": false,
"headline": "feat(client): add people & faces API methods",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:39:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20980f19e3fe5bcaa9784e6d05de8452f1b170ee",
"body": "Prove immich-photo-manager works with any MCP client, not just Claude.\nAdd end-to-end test script, demo transcript, and README section showing\nGemma 4 (local) managing Immich photos via MCP — zero cloud dependency.",
"is_bot": false,
"headline": "docs: add MCP multi-client demo with Gemma 4 + LM Studio",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-18T20:55:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad50438544fae917e6b6b1a1db0db9f4e729f932",
"body": "It's a plain terminal conversation, not markdown.",
"is_bot": false,
"headline": "docs: rename Claude Code transcript from .md to .txt",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T15:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0951bd6f62fb79fee4df34ca066f597ba211736",
"body": "Show that the plugin works from the terminal too — not just the\ndesktop app. Adds screenshot, conversation transcript, and a new\n\"Works in Claude Code\" subsection after Quick Start.",
"is_bot": false,
"headline": "docs: add Claude Code demo and README section",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T15:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd9752f5d292e49fbb7d0ab6acb1702e829d3aaf",
"body": "Updated 15 files: WORKFLOW.md, PLUGIN-INSTALL-GUIDE.md, demo-script.md,\nand all 10 skill SKILL.md frontmatter versions. Zero v1.0.0 references\nremain in the project.",
"is_bot": false,
"headline": "chore: bump all version references to v1.1.0",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T14:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5db0a0bfee231d1e7b8a8ec8540062033855e60c",
"body": "New doc/demos/ folder with step-by-step use cases:\n01-GPS neighbor inference, 02-geographic albums, 03-duplicate detection,\n04-library health, 05-natural language search, 06-screenshot cleanup,\n07-midnight timestamps, 08-interactive gallery, 09-auto album curator,\n10-people report. Each shows actual MCP calls on a live library.",
"is_bot": false,
"headline": "docs: add 10 demo walkthroughs with real MCP tool calls",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T14:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec76cd66ba94ad5b79e31718bb24ff18aacc4f4c",
"body": null,
"is_bot": false,
"headline": "docs: add GPS neighbor inference walkthrough with real MCP calls",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T14:36:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5944464ef3493bfdd0e2c1a4c60e50a170fbda42",
"body": null,
"is_bot": false,
"headline": "chore: bump plugin to v1.1.0 — 22 tools, metadata repair",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T13:27:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fa5c309d54fa50722b075ad78ad53fbc0855d07",
"body": "Root cause found: exiftool fails on external library paths with emojis,\nnot an API or plugin issue. Verified working on Immich upload directory.\nRestored full metadata repair claims with known-limitation note about\nexternal libraries with special characters in paths.",
"is_bot": false,
"headline": "docs: restore metadata repair as verified feature",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T13:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b0019d5b3aa7b6df46178498ad145d9857fa699",
"body": "…xperimental\n\nEXIF-level writes (GPS, dates, description, rating) via update_asset_metadata\ndon't persist reliably on all Immich servers. Asset-level fields (isFavorite)\nwork. Updated all docs to reflect what's verified vs experimental.\n\n- README: metadata repair → metadata analysis, removed comparison table row\n- MCP-TOOLS: marked EXIF fields as experimental with server version note\n- SKILL.md: added fallback to curl scripts when EXIF writes don't persist",
"is_bot": false,
"headline": "docs: honest metadata capabilities — analysis verified, EXIF writes e…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T12:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd8e95510d9504eaa5ae9e90965b12d6fb53873a",
"body": "Add update_asset_metadata MCP tool (22nd tool) that writes dates, GPS\ncoordinates, description, favorites, and ratings back to Immich via\nPUT /assets/{id}. The metadata-fixer skill can now apply fixes directly\ninstead of generating external scripts.\n\nUpdated all docs to reflect 22 tools and highlighted metadata repair\nas a first-class feature in README.",
"is_bot": false,
"headline": "feat: add update_asset_metadata tool — metadata repair is now native",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T12:19:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0591effeccae03e73107e6f07a66029e7f6c734b",
"body": "Restructured to match cmux-resurrect pattern:\n- Move \"What It Does\" above Quick Start (show before install)\n- Replace 5 exhaustive tables with focused highlights + doc links\n- Add 6 screenshots from demo animation (programmatic capture)\n- Add screenshot capture script (scripts/capture-screenshots.js)\n- Add data privacy line (\"photos never leave your server\")\n- Trim comparison table, rewrite intro for benefits not specs",
"is_bot": false,
"headline": "docs: rewrite README — shorter, visual, compelling (278→121 lines)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-15T14:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21b1eede073645eaa4f41759704ed2025dbb5b4e",
"body": null,
"is_bot": false,
"headline": "docs: add Glama score badge and GitHub release badge to README",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-14T18:11:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5ed802908c71c4ea0beaf7f6d3b6ae5d88d0c83",
"body": null,
"is_bot": false,
"headline": "chore: add personal maintainer to glama.json for ownership claim",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-14T17:26:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30abd992041ed0bcdff40b583b40788870a71ad0",
"body": "Register with Glama (glama.ai) MCP server directory.\nGlama crawls GitHub repos with this file and indexes\nthem within ~24h.",
"is_bot": false,
"headline": "chore: add glama.json for MCP server registry discovery",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T20:09:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27e12a1058b9252c0fd790e3bed157c3e57eb92f",
"body": "Add .plugin-scanner.toml to exclude standalone scripts/ from scan.\nUse placeholder format that avoids false positive secret detection\nin setup command doc. Scanner: 84 → 100 (A - Excellent).",
"is_bot": false,
"headline": "security: achieve 100/100 plugin scanner score",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T19:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695e7ab6a73256edb020d93bff3ab8c74a432be4",
"body": "Re-recorded demo GIF and added MP4. Resolved merge conflicts\nwith upstream security changes (kept remote versions).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: update demo to show /setup-immich-photo-manager and 21 tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T19:42:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a2e35971999de31acca6abe99bc2b162a2de4e4f",
"body": "…secrets\n\nAdd responsible disclosure policy. Replace execSync string interpolation\nwith execFileSync argument arrays in record-demo.js. Normalize API key\nplaceholders to uppercase YOUR-API-KEY-HERE to avoid secret scanner\nfalse positives. Plugin scanner score: 66 → 84 (B).",
"is_bot": false,
"headline": "security: add SECURITY.md, fix shell injection, sanitize placeholder …",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T19:38:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8af98065922059823d117994f327e29d110732e9",
"body": "Fix marketplace.json to match Claude Code validation schema: add\n$schema, top-level name/owner, object-type author and source fields.\nUpdate README install commands (claude plugin install, not /plugin).\nAdd doc/PLUGIN-INSTALL-GUIDE.md documenting all errors encountered\nand their fixes for future reference.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: correct marketplace schema + add plugin install guide",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T18:57:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "42f1ddba570aa6c00097bd587101e6aa1b8810a2",
"body": "…onalism",
"is_bot": false,
"headline": "style: remove emojis from plugin description for marketplace professi…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T02:26:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcdd14a1ad1a9ddca68877281b3c2a8cae859e20",
"body": null,
"is_bot": false,
"headline": "docs: fix view mode count to 4 (no compact mode in template)",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T02:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f64c056dd98641f6727f1bc8c22674fb5fa2f49",
"body": "…marketplace",
"is_bot": false,
"headline": "fix: use CLAUDE_PLUGIN_ROOT per official docs, github source type in …",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T02:11:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6547e2ec34ed07604b338e8e80a363a724f99337",
"body": "…posure",
"is_bot": false,
"headline": "security: mask API key in get_connection_info, remove api_key_full ex…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T01:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b888771eaec0bc9dcc084160a191a8ff3b34cc",
"body": "CRITICAL fixes:\n\n- Remove legacy Go implementation (main.go, immich.go, go.mod, go.sum, 9.8MB binary)\n\n- Remove run-mcp-server.sh (referenced Go binary)\n\n- Fix tool count: plugin.json 19>21, marketplace.json 16>21\n\n- Fix tool names in album-manager (immich_* > canonical short names)\n\n- Replace ./imm\n[…]\no 4 command frontmatters\n\n- Use relative path for demo.gif in README\n\n- Deduplicate CORS section in setup command (reference doc/CORS-SETUP.md)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: pre-submission cleanup for Anthropic plugin directory",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T01:38:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "83132eeaede03fbc32099507ca32c538393143bf",
"body": "- Remove personal URL (gallery.txeo.club) from auto-album-curator and travel-map\n\n- Remove hardcoded credentials from test-mcp.py, use placeholders\n\n- Fix album-manager: 4>5 view modes, dual>triple theme support\n\n- Remove stale shared-link reference from setup command\n\n- Remove Strategy 3 internal label from photo-search heading\n\n- Delete stale commit-docs.sh script\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix inconsistencies across skills, commands, and test script",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T01:23:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d77344ce18fd26b91522abb93caa4bcb2acfdb16",
"body": "…earch\n\n- Created doc/CORS-SETUP.md with Nginx/Caddy/Traefik CORS configuration\n- Removed Strategy 2 (Shared Links) from photo-search skill — it created\n public links as a side effect and added complexity without clear benefit\n- Simplified strategy decision flow: base64 is always the default\n- Upda\n[…]\nnew standalone guide\n- Added CORS Setup Guide to README documentation table\n- Removed internal strategy labels from user-facing output guidance\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add CORS setup guide, remove shared links strategy from photo-s…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T00:52:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a05617ca3b581b8ef439d6229159e45597dd11e7",
"body": "- Fix view modes count: 4 → 5 (Detail, Icon, List, Masonry, Gallery)\n- Fix theme count: \"dark/light\" → 3 themes (Light, System, Dark)\n- Fix MCP tools count in GETTING-STARTED: 19 → 21\n- Clarify CORS statement in ARCHITECTURE: doesn't help in Cowork sandbox\n but does enable direct URL loading in regular browsers\n- Remove stale _run-once-makedirs-fix.sh script\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix inconsistencies in README, ARCHITECTURE, and GETTING-STARTED",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-10T22:59:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "158c749cc2f5e4cae608f711d88f5e2109d5ed2c",
"body": "…ill docs\n\nReplaced all instances of personal Immich URL with your-immich-server.com\nto ensure clean experience for new users installing the plugin.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "security: replace hardcoded server URL with generic placeholder in sk…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T21:24:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5397a80c35178ea48447b61c43fa10ccc0c53cf4",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove WEB-FIXES-TODO from repo, moved to Desktop",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T20:26:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae8853b112c1bf3ca53769ed532aac95141226dd",
"body": "…xes TODO\n\nThe MCP server is Python/stdio, not Go/HTTP. README and MCP-TOOLS.md\nstill referenced Go, Streamable HTTP, mcp-go, and port 8626.\nUpdated to reflect the actual Python implementation with stdio transport.\n\nAlso corrected tool count from 16 to 21 (added Thumbnails and Config\ncategories), re\n[…]\n stale Go Report Card badge, and added Python 3.10+\nas a prerequisite.\n\ndoc/WEB-FIXES-TODO.md lists equivalent changes needed on drolosoft.com.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix Go→Python architecture, update tool count to 21, add web fi…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T20:20:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1d1385fbc53f52fdc500eec771f5714fbdc5d2e3",
"body": "The Cowork viewer runs in an about: sandbox that blocks all external\nnetwork requests. This doc explains why base64 data URIs are the only\nviable approach for embedding thumbnails, with full data flow diagrams,\nperformance characteristics, and the fallback direct-API workflow.\n\nAlso adds troubleshoo\n[…]\n'\nissue (ping is a public endpoint), cross-references between docs, and\ncorrects the MCP-TOOLS architecture section to reflect stdio transport.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add ARCHITECTURE.md explaining base64 thumbnail delivery in Cowork",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T19:31:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ecd862b20ffe9794fe6224b94c002ed06098cd6e",
"body": "- SKILL.md v1.2.0: document three thumbnail strategies (base64 default,\n shared links for albums, CORS-enabled direct URLs as ideal)\n- Add strategy decision flow for choosing the right approach\n- Updated generation workflow example to show shared link path\n- setup command: add Post-Install CORS Configuration section with\n Nginx, Caddy, and Traefik examples\n- Explain security considerations for Access-Control-Allow-Origin\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: thumbnail delivery strategies and CORS post-install guide",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T22:35:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f2dfd27bd1a4b20b0bddef9115c494ec7030a7d9",
"body": "Prevents accidental commit of persisted credentials (config.json\nwith API keys) from the cache directory.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add .mcpb-cache/ to .gitignore",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T13:22:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5881ed9e93cb4bea6f29e3734b39ccb73bae4fab",
"body": "_find_cache_dir now accepts the env var path even when the directory\nhasn't been created yet. save_config calls os.makedirs(exist_ok=True)\nso credentials persist on first use without manual directory creation.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: create .mcpb-cache dir on save_config if it doesn't exist",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T12:55:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8c6e852df7d1cccb15c492d48f79fb66e1b4137c",
"body": "Cowork mounts remote plugin configs as read-only, so users cannot update\ntheir Immich API key without reinstalling the plugin. This adds a\ncredentials override mechanism using the writable .mcpb-cache directory:\n\n- ImmichClient now checks .mcpb-cache/config.json before env vars\n- New update_credenti\n[…]\naps creds\n- mcp.json exposes IMMICH_CACHE_DIR for reliable cache dir discovery\n- Setup skill updated to use update_credentials for key rotation\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add update_credentials MCP tool for in-session API key rotation",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T11:27:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "080d8df7801709332ad019a943896f1a01379a1a",
"body": "Cowork sandbox:\n- Viewer runs at about: protocol, blocks ALL external requests\n- Only data: URIs (base64) work for images\n\nTemplate (viewer-template.html):\n- Reverted from URL-based to base64 embedded thumbnails\n- Removed fetchThumb(), thumbUrl(), thumbCache, API_KEY\n- loadPage(): first page immedia\n[…]\ns):\n- Documented base64 approach with get_thumbnails_batch\n- size=thumbnail (250px, ~18KB avg), limit ~50 photos\n- Renamed /setup to /setup-immich-photo-manager to avoid\n collision with other plugins",
"is_bot": false,
"headline": "fix: base64 thumbnails, lazy loading, pagination, rename setup command",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T09:57:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9da24bc09973765a2a23af591bfbede784279f95",
"body": "Cowork sandbox discovery:\n- Cowork viewer runs at about: protocol with origin: null\n- ALL external network requests are blocked (fetch, img src, etc.)\n- Only data: URIs (base64) work for images\n- URL-based approach (fetch + x-api-key) does NOT work in Cowork\n\nTemplate changes (viewer-template.html):\n[…]\nthumbnail (250px, ~18KB avg)\n- Limit galleries to ~50 photos (~0.9MB HTML)\n- Removed all references to fetch(), API_KEY, URL-based loading\n- Updated generation workflow to include thumbnail fetch step",
"is_bot": false,
"headline": "fix: revert to base64 thumbnails + fix lazy loading & pagination",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T09:39:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33a96deb6a511292fa82444bb2deb9cbe88abc5f",
"body": "New MCP tool:\n- get_thumbnails_batch: fetch base64 thumbnails by asset ID list without\n requiring an album (19th tool). Used by search workflow to avoid creating\n temporary albums.\n\nSearch workflow redesign (photo-search SKILL.md):\n- NEVER create temporary albums during search\n- Find real user-cre\n[…]\noto-search + album-manager):\n- Documented {{PHOTO_ENTRIES}} placeholder format\n- Documented .flat() pattern and parseInt fallbacks\n- Added EXIF location quirks (Tikal=Flores, Lanzarote=municipalities)",
"is_bot": false,
"headline": "feat: add get_thumbnails_batch + harden template against JS injection",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T22:14:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "07e9673370f9f26cd4284f12e9fa69b804e82532",
"body": "New MCP tool:\n- get_thumbnails_batch: fetch base64 thumbnails by asset ID list without\n requiring an album (19th tool). Used by search workflow to avoid creating\n temporary albums.\n\nSearch workflow redesign (photo-search SKILL.md):\n- NEVER create temporary albums during search\n- Find real user-cre\n[…]\nALBUM_TOTAL: already had parseInt (confirmed)\n- ALBUMS_JSON: already had safe parser with try/catch (confirmed)\n\nUpdated SKILL.md docs with relaxed placeholder rules reflecting the\ndefensive template.",
"is_bot": false,
"headline": "feat: add get_thumbnails_batch + harden template against JS injection",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T21:11:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c8a6ff4ff45c00c3c7effa3a2793a0e2716e498",
"body": "- Added get_thumbnails_batch to immich_client.py and server.py (19th MCP tool)\n Fetches base64 thumbnails by asset ID list without requiring an album.\n- Rewrote photo-search SKILL.md: NEVER create temporary albums during search.\n New workflow: search -> find real albums -> use get_album_thumbnails\n[…]\nted Albums = real albums only.\n- Updated album-manager SKILL.md: clarified Related Albums must be real,\n user-created albums. Never fabricate album entries.\n- Updated plugin.json: 18 -> 19 MCP tools.",
"is_bot": false,
"headline": "feat: add get_thumbnails_batch tool + rewrite search workflow",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T20:04:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f774d173a675993a578047d28776b89b40b5e255",
"body": "New MCP tools:\n- get_asset_thumbnail: base64 thumbnail for a single asset\n- get_album_thumbnails: batch thumbnails for an album (gallery pipeline)\n\nTemplate fixes (viewer-template.html):\n- ALBUM_TOTAL: wrapped in parseInt() — no longer breaks on non-numeric values\n- ALBUMS_JSON: accepts both array a\n[…]\n plain integers for JS values)\n- Clarified ALBUMS_JSON format (array or single object, quoted keys)\n- Updated plugin description: 16 → 18 tools\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: thumbnail tools + safe template placeholders",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T19:35:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8b66bbad23024cc08f7134f47f0924f679c94689",
"body": "- viewer-template.html: wrap ALBUM_TOTAL in parseInt() so non-numeric\n values like '200+' no longer break the gallery JS\n- server.py + immich_client.py: add get_asset_thumbnail and\n get_album_thumbnails tools (18 tools total)\n- SKILL.md (photo-search, album-manager): add placeholder rules section\n\n[…]\nCOUNT/ALBUM_TOTAL must be plain ints\n- plugin.json: update description (16 → 18 tools)\n- build-plugin.sh: new script to rebuild the .plugin zip\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: safe ALBUM_TOTAL parsing + add thumbnail MCP tools",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T19:21:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fa645d2af7e43adc34c882225553d96be1270875",
"body": "These two tools were referenced by the photo-search and album-manager\nskills but were missing from the server. They enable the HTML gallery\ngeneration pipeline by returning base64-encoded thumbnails.\n\nAlso adds build-plugin.sh for rebuilding the Cowork .plugin file and\nupdates the plugin description (16 → 18 tools).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add get_asset_thumbnail and get_album_thumbnails MCP tools",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T17:04:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9c42350a566486c74126b3d4f760d152eaa31a37",
"body": null,
"is_bot": false,
"headline": "feat: setup-mcp.sh auto-allows immich MCP tools in Claude permissions",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47f1db7af1ab7b5316b20d3b87a9441180c4cb98",
"body": "…ailable\n\nReturns a helpful JSON error message with setup instructions instead of\npropagating a raw 500 Internal Server Error when the Immich machine\nlearning service is not running or Smart Search (CLIP) is disabled.\nAlso documents the ML requirement in README.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: graceful error handling for search_smart when ML service is unav…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:30:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "510ad76f2f74cab5f07412bd5909c9c8af8a3972",
"body": "…rk + connection test",
"is_bot": false,
"headline": "feat: setup-mcp.sh now configures Claude Desktop + Claude Code + Cowo…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:08:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69b65c6c192ec7960736f6101795d5933d7ae53b",
"body": null,
"is_bot": false,
"headline": "fix: restore execute permission on setup-mcp.sh",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:00:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bdb702922bbae7328ba8e9dc7260c437d03aac7",
"body": "…d of manual warning",
"is_bot": false,
"headline": "fix: setup-mcp.sh auto-merges into existing ~/.claude/mcp.json instea…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T13:58:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42df4e84460dcd7d40834a6786375b95a0423b9d",
"body": "…ence\n\n- plugin.json: mcpServers now points to .claude-plugin/mcp.json\n- Fix tool count from 19 to 16 across all docs and configs\n- README: rewrite Quick Start with correct claude plugin commands and setup-mcp.sh\n- README: update architecture diagram from Go HTTP to Python stdio\n- GETTING-STARTED: rewrite for Python MCP server with setup-mcp.sh workflow\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update README, GETTING-STARTED, fix tool count and plugin refer…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T12:25:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d020030c3c53e6859a82ec39106a240bf40823f3",
"body": "…json\n\n- Fix setup-mcp.sh: all escaped $ replaced with proper $ (was syntax error)\n- Add src/requirements.txt with mcp and httpx deps\n- Remove .mcp.json from git tracking (user-generated, contains API keys)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: critical audit fixes - setup script, requirements, untrack .mcp.…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T12:19:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9c110e84b697ef258cfdea246df54aadef247b41",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "rename marketplace to drolosoft-marketplace",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-07T23:22:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "305cb6ec804c314314dbe294088a320017f1e4a1",
"body": "- .claude-plugin/mcp.json: replaced cwd with PYTHONPATH env var (cwd not supported by Claude Code)\n- .mcp.json.example: updated to PYTHONPATH-based stdio config template\n- scripts/setup-mcp.sh: interactive setup script for first-time users\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use PYTHONPATH instead of cwd for MCP config, add setup script",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-07T19:34:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5c7b7edcf120167fdd927deb4a1f3ca7bd5d321",
"body": "…e URL\n\n- Change .claude-plugin/mcp.json from HTTP to stdio transport (Claude Code\n silently ignores HTTP-based MCP configs, causing tools to not appear)\n- Replace local file:// source URL in marketplace.json with GitHub URL\n- Normalize .mcp.json with relative cwd and consistent placeholders",
"is_bot": false,
"headline": "fix: use stdio transport in bundled MCP config, fix marketplace sourc…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-05T05:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e18a5de95c2c495571a5359d6840bf40f51962ee",
"body": "- Add Context type hint to all ctx parameters so FastMCP injects context\n automatically instead of exposing it as a required tool input\n- Support dual transport: stdio (for Cowork cloud) and HTTP (for local dev)\n via MCP_TRANSPORT env var\n- Update .mcp.json to use stdio subprocess config\n- Preserve HTTP config as .mcp.http.json.example",
"is_bot": false,
"headline": "feat: add stdio transport for Cowork compatibility",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-05T05:31:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "775df6888cfa6fdad5b5a6402d703ac8cf7a3876",
"body": "…Code",
"is_bot": false,
"headline": "fix: remove unrecognized icon key, fix marketplace schema for Claude …",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-05T04:47:08Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 5,
"commits_last_year": 134,
"latest_release_at": "2026-07-15T23:00:35Z",
"latest_release_tag": "v1.3.1",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 9,
"days_since_latest_release": 10,
"mean_days_between_releases": 23.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "immich-photo-manager",
"exists": true,
"license": "MIT",
"keywords": [
"immich",
"mcp",
"photo-management",
"photos",
"Development Status :: 4 - Beta",
"Intended Audience :: End Users/Desktop",
"License :: OSI Approved :: MIT License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/immich-photo-manager/",
"is_deprecated": false,
"latest_version": "1.3.0",
"repository_url": "https://github.com/drolosoft/immich-photo-manager",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-05-20T12:03:59.050514Z",
"latest_published_at": "2026-05-20T12:04:05.450561Z",
"latest_version_yanked": null,
"days_since_latest_publish": 67
}
]
},
"popularity": {
"forks": 8,
"stars": 32,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-04-11",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-05-09",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-06-21",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 8,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"demos"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 53318,
"source_files_sampled": 17,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml",
"src/requirements.txt"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 29,
"malicious_count": 0,
"assessed_package": "pypi:immich-photo-manager@1.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.24.0,<1.0"
},
{
"name": "mcp",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.9.0,<2.0"
},
{
"name": "uvicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.24.0,<1.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "txeo",
"commits": 64,
"avatar_url": "https://avatars.githubusercontent.com/u/2773272?v=4"
},
{
"type": "User",
"login": "juanatsap",
"commits": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/56647674?v=4"
},
{
"type": "User",
"login": "kirel",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/9124?v=4"
},
{
"type": "User",
"login": "tclancy",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/67803?v=4"
},
{
"type": "User",
"login": "bradhgq",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/21327628?v=4"
}
],
"contributors_sampled": 5,
"top_contributor_share": 0.547
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 5,
"reason": "2 out of 4 merged PRs checked by a CI test -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "07688a73c1b98e447a3086558251bed02258beb3",
"ran_at": "2026-07-26T22:51:41Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T12:50:52Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-23T12:50:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/drolosoft/immich-photo-manager",
"host": "github.com",
"name": "immich-photo-manager",
"owner": "drolosoft"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 56,
"vitality": 82,
"community": 40,
"governance": 51,
"engineering": 75
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 134,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "134 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 134
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 5,
"latest_release_tag": "v1.3.1",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 23.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~23.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 23.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 8,
"stars": 32,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "32 stars",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 32
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 5,
"top_contributor_share": 0.547
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 55% of commits",
"points": 10.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 55
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "5 contributors",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 5
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "drolosoft",
"public_repos": 11,
"account_age_days": 126
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of drolosoft",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "drolosoft"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~0 yr old",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"packages": [
"immich-photo-manager"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 67
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 67 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 67
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "1 published versions",
"points": 4,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 1
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 75,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 4 merged PRs checked by a CI test -- score normalized to 5",
"points": 10,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"albums",
"claude",
"claude-plugin",
"cleanup",
"duplicates",
"gallery",
"geolocation",
"immich",
"mcp",
"mcp-server",
"metadata",
"photo-management",
"photos",
"self-hosted",
"immich-plugin",
"python"
],
"has_wiki": true,
"homepage": "https://drolosoft.com/immich-photo-manager.html?lang=en",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://drolosoft.com/immich-photo-manager.html?lang=en",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "16 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 16
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 56,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 4 merged PRs checked by a CI test -- score normalized to 5",
"points": 1.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:immich-photo-manager@1.3.0 runtime dependency closure — what installing the published package pulls in — 29 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:immich-photo-manager@1.3.0",
"assessed": 29
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 29,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 29,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 42,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.98,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.23,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "23 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 23,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "HTML",
"largest_source_bytes": 53318,
"source_files_sampled": 17,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "HTML without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "HTML"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/17 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"demos"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "demos",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "demos"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T22:51:50.575652Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/drolosoft/immich-photo-manager.svg",
"full_name": "drolosoft/immich-photo-manager",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit drolosoft/immich-photo-manager teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
