shell helper (use child_process.spawn).\n2. forge config warns about env-vs-config drift at save time.\n3. --base-url no longer double-appends /v1 (normalizeOpenA\n[…]\n credentials by default; --no-validate opts out.\n6. Distillation backoff: 1m→2m→4m→8m→16m→30m on consecutive failures.\n7. Stale-hook detection uses realpath + SHA256 (no churn on equivalent binaries).", "is_bot": false, "headline": "v0.4.38: OpenCode compatibility — fix plugin shell helper, base URL, …", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-05-07T18:49:32Z", "body_truncated": true, "is_coding_agent": false }, { "oid": "7a7fa65a1e1244884ac960d35ed7830a79dce72d", "body": "…vent DB pollution", "is_bot": false, "headline": "v0.4.37: filter Docker/CI build noise from forge event capture to pre…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T20:23:21Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "acd461b2ee5935b173642156b6ecebc40cb0a43e", "body": "…dboxed agents)", "is_bot": false, "headline": "v0.4.36: disable SessionStart inject-check hooks (noisy on remote/san…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T19:02:39Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "b9fba7484b01b6ec9c04de7412b956ca96edb5db", "body": "…e principle injection", "is_bot": false, "headline": "v0.4.35: Dockerfile fixes, refactored modular cmd/ commands, proactiv…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T18:51:49Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "02d909910dff70f6f99fc772f5318d817752aeaa", "body": null, "is_bot": false, "headline": "Fix Dockerfile: run go mod tidy before build to generate go.sum", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T18:31:07Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "6453036cd404b65046b252e94d840a3df20cd761", "body": null, "is_bot": false, "headline": "Restore payment server source and fix Dockerfile to build from source", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T18:28:52Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "d063c478b24a19643a0f6f00be71d60198c2aa75", "body": null, "is_bot": false, "headline": "Fix Dockerfile: use pre-compiled binary instead of building", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T18:25:17Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "ed5efdb4344fc9f71bea42673fe25f767d5628ce", "body": null, "is_bot": false, "headline": "Fix Dockerfile: remove cd payment (rootDir already set to payment)", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T18:22:34Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "642bd728f30c7282980aa29651080997109df182", "body": null, "is_bot": false, "headline": "Add Dockerfile for payment server", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T17:44:34Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "acf785a3d6a0aa1a512e6ab1decf14c3e674ebce", "body": null, "is_bot": false, "headline": "Bump version to 0.4.34", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T17:36:35Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "6ee60dcdab7a2508451cb1bf9179e82b4cb99ce3", "body": null, "is_bot": false, "headline": "Refactor: split cli.go into modular command files", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T17:35:48Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "596f434de0f014c237c0b3f85404753a5be44d5d", "body": "…e/Gemini/Codex/OpenCode, inject_principles MCP tool, auto-inject on session start", "is_bot": false, "headline": "v0.4.33: proactive principle injection — SessionStart hooks for Claud…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T16:53:24Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "ed7c827881de08da251d439817ac13f2b4f6e7b3", "body": "… add nvm to managed paths", "is_bot": false, "headline": "fix: doctor --repair restarts daemon, re-queue empty distill batches,…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-29T15:39:38Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "5e35f346a2a6c3fc1693ec4fcc590044e801e098", "body": null, "is_bot": false, "headline": "Fix Claude hook recall output", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-28T22:58:42Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "3f8b971dc5bf04c34d38e8db0bafb252382f42d1", "body": "Adds `forge compact-check` subcommand called by a new asyncRewake\nPostToolUse hook in Claude Code. After every tool use, the hook counts\nsession events in the Forgememo DB and exits with code 2 at every 30th\nevent, waking the Claude Code model and injecting a rewakeMessage that\ninstructs it to run /\n[…]\nn.go: dispatch compact-check to runCompactCheck\n- cmd/compact_check_test.go: 5 tests covering 0/29/30/isolation cases\n- Bump version to 0.4.29\n\nCo-Authored-By: Claude Haiku 4.5 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Add auto-compact at 30 tool uses via asyncRewake hook", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-18T20:47:10Z", "body_truncated": true, "is_coding_agent": true }, { "oid": "e9367b1624b5b4505bca1ad47d1a9422414e00e3", "body": "Principles now carry an explicit outcome (success/failure/unknown) and\na lean implementation hint (≤120 chars) extracted by the distillation\nLLM. Injection format switches from verbose narrative to a tight\none-liner: \"Past success: title — exact pattern used.\" Stricter\ndistillation prompt rejects va\n[…]\n outcome\nor technique. Recall threshold lowered to 1.5 for impl_hint-bearing\nprinciples to surface concrete past implementations proactively.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Add outcome + impl_hint to principles for tighter memory injection", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-11T16:41:08Z", "body_truncated": true, "is_coding_agent": true }, { "oid": "3fe4e5a1438840f99355f4fc375836adecf04813", "body": null, "is_bot": false, "headline": "Bump version to 0.4.27", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-10T01:02:52Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "e29c14bedcdfa442dcbc41493d433a14d188fb89", "body": null, "is_bot": false, "headline": "Switch distillation to checkpoint triggers", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-10T00:59:57Z", "body_truncated": false, "is_coding_agent": false }, { "oid": "63d9fa4bf2dc6b869b096511db3a4a3714e645de", "body": "- Add RecentActivePrinciples() DB method (active/NULL status only)\n- Cross-project recall scan now uses RecentActivePrinciples instead\n of RecentPrinciples (which returns all statuses)\n- Global fallback in loadSessionRecallContext uses\n RecentPrinciplesByProject(\"\") which already filters via activeOnly()\n- Two new tests prove conflicting principles are excluded from both\n same-project recall and global fallback injection paths\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Never inject conflicting principles into Claude context", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T14:39:30Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "04ee5ba445e507d9d81b42523f5c4099275e51b6", "body": "Scan same-project principles/summaries first (50/20 cap) and exit\nearly when a high-confidence match is found, skipping the cross-project\nscan entirely. Cross-project scan capped at 100/80 (down from 250/250).\n\nDashboard: project_id now rendered via projectLabel() helper with a\nmonospace style and t\n[…]\ndentified.\n\nAlso: recall now surfaces same-project high-confidence matches, not\nonly cross-project ones — updated test to reflect new intent.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Optimize prompt recall scan; fix dashboard project name display", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T14:19:13Z", "body_truncated": true, "is_coding_agent": true }, { "oid": "690044f312b33b601db292574c03c9523cc88c08", "body": "Co-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Bump version to 0.4.26", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T07:10:25Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "c491ec35178f40f5835c78a6e5744e358883a333", "body": "Windows does not honour 0o600 — os.Stat reports 0666. Guard the\npermission assertion with runtime.GOOS != \"windows\".\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Fix TestSave_RoundTrip on Windows: skip Unix file permission check", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T07:08:03Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "6658236b6c625a064330eed2787c19d18f2771c2", "body": "Coverage gains: db 50→74%, config 24→77%, scanner 21→32%,\ndashboard 60→66%, mcp 59→62%.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Add test coverage across cmd, db, mcp, dashboard, scanner packages", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T07:04:50Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "9eb287b6176a06cde30e5bb3a56c05fbb0934144", "body": "Co-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Bump version to 0.4.25", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T06:50:01Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "baca35beb089c8ed85a871bfc5b96267afd8dde1", "body": "…to high confidence\n\n- On first UserPromptSubmit of a session, load previous session summary\n for the same project (request + learnings + next_steps) and inject it\n as Forge Context so the agent resumes with full project context.\n- Prompt-matched principle/summary hints now only inject when score \n[…]\nresent in test env).\n- Add test coverage for config.Save, config.SetEnvFromFile, scanner\n scanGemini dedup, loadHashes/saveHashes roundtrip.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "Inject last project session on new session start; gate dynamic hints …", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T06:49:38Z", "body_truncated": true, "is_coding_agent": true }, { "oid": "f317bd1b8b4165fe8a3b0b1185ce230b6794ee9c", "body": "Co-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "chore: bump version to v0.4.24", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T06:24:23Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "5845122592b474c1480fde82863c1e8522e28d2b", "body": "- #23: readonly DB gives clear error + chown fix hint; auto-chmod on open\n- #24b: distill --all no longer exits prematurely when LLM returns 0 principles\n- #24c: PostToolUse payloads now include tool_input/tool_response content (not just 200-char raw JSON)\n- #24d: forge start warns when shell env va\n[…]\nons auto-detect and repair stale hook binary paths after upgrade\n- fix: TestLoadConfigDefaults now clears FORGE_TIMEOUT to be env-independent\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: address issues #24, #23, #21, #13", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-08T06:20:58Z", "body_truncated": true, "is_coding_agent": true }, { "oid": "42c7569b4375230ab3be07bd9d5628d702020fe5", "body": "Co-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "chore: bump version to v0.4.23", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-07T16:08:41Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "99097f57697b66767e8a12fdf4ccf41c13e39641", "body": "Fix a TOCTOU race in acquireDistillLock where a goroutine could read an\nempty lock file (PID not yet written) as stale, remove it, and acquire a\nsecond lock — causing concurrent distillation. Fix uses a process-level\nsync.Mutex fast path (TryLock) to reject same-process concurrency before\ntouching t\n[…]\nams per tool\n- New forge agent-guide command outputs copy-pasteable CLAUDE.md block\n- --help gains Agent setup section with 5-step onboarding\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: resolve distill lock race + improve agent-facing docs", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-07T16:04:18Z", "body_truncated": true, "is_coding_agent": true }, { "oid": "b42535f8fc378be8d00d1b10c6f2418bb8c04c12", "body": "Co-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "chore: bump version to v0.4.22", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T21:36:11Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "3ec023ab4520839ee0035c5b7191825f45d8c418", "body": "…rver\n\nWithout a delay, goroutine 1 could complete its entire distillation before\ngoroutine 2 called acquireDistillLock, causing a legitimate second LLM call.\nAdding a 300ms server delay ensures goroutine 1 holds the lock when goroutine 2\ntries to acquire it, making the concurrency guard observable.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: make NoDuplicateDistillation test deterministic with slow LLM se…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T21:23:17Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "90e6b89632f8acb00dd7e3e3f02cc3eb688cb103", "body": "Windows always returns 0666; the 0600 check is only meaningful on POSIX.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: skip file-permission test on Windows (no Unix permission bits)", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T21:18:47Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "ac79042bbf31d54d958601d64ed72915f953540a", "body": "- repair_test.go: skip plist tests on non-darwin (Linux tried to read\n systemd unit instead of plist, causing false failures)\n- cli.go: swap defer order in runDistill() so lock.Close() runs before\n cleanDistillLock() — Windows cannot delete an open file\n- distill_flags_test.go: replace strings.LastIndex(lockPath, \"/\") with\n filepath.Dir() to handle Windows backslash paths; add filepath import\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: resolve Linux and Windows CI test failures", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T21:13:18Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "ec3f5ecc8253b88655c5c3e9c28ea1342b3b8154", "body": "repairServiceIfNeeded() is a no-op on Windows; skip the two tests that\nexpect plist-based repair behavior so Windows CI passes.\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: skip plist repair tests on Windows (v0.4.21)", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T20:51:58Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "a3a1a506d9775f123a36eb8ba13915baa6cc9fb7", "body": "Co-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: add missing exa.go required by retrieve worker/planner (v0.4.21)", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T20:49:57Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "1a368435f683a48f0afcde826e67983dd17b9d89", "body": "Stage db/principles/distill/retrieve/dashboard changes that were already\nlocally modified but omitted from the previous commit, causing CI build\nfailure (InsertPrinciple signature mismatch).\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "fix: include in-progress internal changes needed for build (v0.4.21)", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T20:48:18Z", "body_truncated": false, "is_coding_agent": true }, { "oid": "50ac7733f5bbc1bf6d8553bfa90e81c9149fdf6c", "body": "…v0.4.21)\n\n- Auto-repair launchd/systemd plist path on forge start when binary moves\n- Atomic forge.addr write via temp-file rename (prevents partial reads)\n- forge distill --all drains full backlog; --wait queues behind running distill\n- Detect duplicate forge binaries in PATH at init and doctor; r\n[…]\n installs\n- Version-aware npm setup: skip same version, abort on downgrade, warn on PATH conflicts\n- 40+ new tests covering all new behaviour\n\nCo-Authored-By: Claude Sonnet 4.6 \u003cnoreply@anthropic.com>", "is_bot": false, "headline": "feat: daemon reliability, duplicate binary detection, distill drain (…", "author_name": "jimkali", "author_login": "KalinovJim", "committed_at": "2026-04-06T20:45:06Z", "body_truncated": true, "is_coding_agent": true } ], "releases_count": 75, "commits_last_year": 177, "latest_release_at": "2026-07-18T15:01:46Z", "latest_release_tag": "v0.7.2", "releases_from_tags": false, "days_since_last_push": 5, "active_weeks_last_year": 14, "days_since_latest_release": 5, "mean_days_between_releases": 1.9 }, "community": { "has_readme": true, "has_license": false, "has_description": false, "has_contributing": false, "health_percentage": 14, "has_issue_template": false, "has_code_of_conduct": false, "has_pull_request_template": false }, "ecosystem": { "packages": [ { "name": "forgememo-cli", "exists": true, "license": "MIT", "keywords": [ "ai", "claude", "memory", "mcp", "cli", "agent" ], "ecosystem": "npm", "matches_repo": true, "registry_url": "https://www.npmjs.com/package/forgememo-cli", "is_deprecated": false, "latest_version": "0.7.2", "repository_url": "https://github.com/intelogroup/forgememory-cli", "versions_count": 60, "total_downloads": null, "dependents_count": null, "deprecation_note": null, "maintainers_count": 1, "monthly_downloads": 3843, "first_published_at": "2026-04-03T20:33:12.653000Z", "latest_published_at": "2026-07-18T15:01:47.942000Z", "latest_version_yanked": null, "days_since_latest_publish": 5 } ] }, "popularity": { "forks": 0, "stars": 1, "watchers": 0, "fork_history": { "days": [], "complete": true, "collected": 0, "total_forks": 0 }, "star_history": null, "open_issues_and_prs": 20 }, "ai_readiness": { "has_nix": false, "example_dirs": [], "has_llms_txt": false, "has_dockerfile": false, "has_mcp_signal": false, "bootstrap_files": [ "Makefile" ], "api_schema_files": [], "has_devcontainer": false, "typecheck_configs": [ "mastra/tsconfig.json" ], "toolchain_manifests": [ "go.mod" ], "largest_source_bytes": 60935, "source_files_sampled": 125, "oversized_source_files": 1, "agent_instruction_files": [ "CLAUDE.md" ], "agent_instruction_max_bytes": 2729 }, "dependencies": { "manifests": [ "go.mod", "mastra/package.json", "npm/package.json" ], "advisories": { "error": null, "scope": "repository_graph", "source": "osv", "findings": [ { "name": "uuid", "direct": true, "version": "9.0.1", "severity": "high", "ecosystem": "npm", "cvss_score": 7.5, "advisory_ids": [ "GHSA-w5hq-g745-h8pq" ], "fixed_version": "13.0.1", "advisory_count": 1, "oldest_advisory_days": 92 }, { "name": "fast-uri", "direct": false, "version": "3.1.2", "severity": "high", "ecosystem": "npm", "cvss_score": 7.5, "advisory_ids": [ "GHSA-4c8g-83qw-93j6", "GHSA-v2hh-gcrm-f6hx" ], "fixed_version": "4.1.1", "advisory_count": 2, "oldest_advisory_days": 2 }, { "name": "js-yaml", "direct": false, "version": "3.14.2", "severity": "high", "ecosystem": "npm", "cvss_score": 7.5, "advisory_ids": [ "GHSA-52cp-r559-cp3m", "GHSA-h67p-54hq-rp68" ], "fixed_version": "4.3.0", "advisory_count": 2, "oldest_advisory_days": 38 }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "2.2.8", "severity": "moderate", "ecosystem": "npm", "cvss_score": 4.3, "advisory_ids": [ "GHSA-866g-f22w-33x8" ], "fixed_version": null, "advisory_count": 1, "oldest_advisory_days": 66 }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "3.0.25", "severity": "moderate", "ecosystem": "npm", "cvss_score": 4.3, "advisory_ids": [ "GHSA-866g-f22w-33x8" ], "fixed_version": null, "advisory_count": 1, "oldest_advisory_days": 66 }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "3.0.27", "severity": "moderate", "ecosystem": "npm", "cvss_score": 4.3, "advisory_ids": [ "GHSA-866g-f22w-33x8" ], "fixed_version": null, "advisory_count": 1, "oldest_advisory_days": 66 }, { "name": "@hono/node-server", "direct": false, "version": "1.19.14", "severity": "moderate", "ecosystem": "npm", "cvss_score": 5.9, "advisory_ids": [ "GHSA-frvp-7c67-39w9" ], "fixed_version": "2.0.5", "advisory_count": 1, "oldest_advisory_days": 2 }, { "name": "hono", "direct": false, "version": "4.12.25", "severity": "moderate", "ecosystem": "npm", "cvss_score": 6.5, "advisory_ids": [ "GHSA-hvrm-45r6-mjfj", "GHSA-w62v-xxxg-mg59", "GHSA-xgm2-5f3f-mvvc" ], "fixed_version": "4.12.27", "advisory_count": 3, "oldest_advisory_days": 2 }, { "name": "golang.org/x/sys", "direct": false, "version": "v0.42.0", "severity": "unknown", "ecosystem": "go", "cvss_score": null, "advisory_ids": [ "GO-2026-5024" ], "fixed_version": "0.44.0", "advisory_count": 1, "oldest_advisory_days": 62 } ], "collected": true, "malicious": [], "truncated": false, "by_severity": { "high": 3, "unknown": 1, "moderate": 5 }, "advisory_count": 13, "affected_count": 9, "assessed_count": 315, "malicious_count": 0, "assessed_package": null, "unassessed_count": 0, "direct_affected_count": 1 }, "ecosystems": [ "go", "npm" ], "dependencies": [ { "name": "github.com/google/uuid", "manifest": "go.mod", "ecosystem": "go", "version_constraint": "v1.6.0" }, { "name": "modernc.org/sqlite", "manifest": "go.mod", "ecosystem": "go", "version_constraint": "v1.48.0" }, { "name": "@mastra/core", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^1.41.0" }, { "name": "@ai-sdk/openai", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^2.0.0" }, { "name": "@ai-sdk/anthropic", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^2.0.0" }, { "name": "ollama-ai-provider", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^1.0.0" }, { "name": "better-sqlite3", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^11.0.0" }, { "name": "zod", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^3.22.0" }, { "name": "uuid", "manifest": "mastra/package.json", "ecosystem": "npm", "version_constraint": "^9.0.0" } ], "all_dependencies": { "error": null, "source": "github-sbom", "packages": [ { "name": "github.com/google/uuid", "direct": true, "version": "v1.6.0", "ecosystem": "go" }, { "name": "modernc.org/sqlite", "direct": true, "version": "v1.48.0", "ecosystem": "go" }, { "name": "@ai-sdk/anthropic", "direct": true, "version": "2.0.83", "ecosystem": "npm" }, { "name": "@ai-sdk/openai", "direct": true, "version": "2.0.108", "ecosystem": "npm" }, { "name": "@mastra/core", "direct": true, "version": "1.43.0", "ecosystem": "npm" }, { "name": "better-sqlite3", "direct": true, "version": "11.10.0", "ecosystem": "npm" }, { "name": "ollama-ai-provider", "direct": true, "version": "1.2.0", "ecosystem": "npm" }, { "name": "uuid", "direct": true, "version": "11.1.1", "ecosystem": "npm" }, { "name": "uuid", "direct": true, "version": "9.0.1", "ecosystem": "npm" }, { "name": "zod", "direct": true, "version": "3.25.76", "ecosystem": "npm" }, { "name": "zod", "direct": true, "version": "4.4.3", "ecosystem": "npm" }, { "name": "github.com/danieljoos/wincred", "direct": false, "version": "v1.2.3", "ecosystem": "go" }, { "name": "github.com/dustin/go-humanize", "direct": false, "version": "v1.0.1", "ecosystem": "go" }, { "name": "github.com/godbus/dbus/v5", "direct": false, "version": "v5.2.2", "ecosystem": "go" }, { "name": "github.com/mattn/go-isatty", "direct": false, "version": "v0.0.20", "ecosystem": "go" }, { "name": "github.com/ncruces/go-strftime", "direct": false, "version": "v1.0.0", "ecosystem": "go" }, { "name": "github.com/remyoudompheng/bigfft", "direct": false, "version": "v0.0.0-20230129092748-24d4a6f8daec", "ecosystem": "go" }, { "name": "github.com/zalando/go-keyring", "direct": false, "version": "v0.2.8", "ecosystem": "go" }, { "name": "golang.org/x/sys", "direct": false, "version": "v0.42.0", "ecosystem": "go" }, { "name": "modernc.org/libc", "direct": false, "version": "v1.70.0", "ecosystem": "go" }, { "name": "modernc.org/mathutil", "direct": false, "version": "v1.7.1", "ecosystem": "go" }, { "name": "modernc.org/memory", "direct": false, "version": "v1.11.0", "ecosystem": "go" }, { "name": "@a2a-js/sdk", "direct": false, "version": "0.3.13", "ecosystem": "npm" }, { "name": "@ai-sdk/provider", "direct": false, "version": "1.1.3", "ecosystem": "npm" }, { "name": "@ai-sdk/provider", "direct": false, "version": "2.0.3", "ecosystem": "npm" }, { "name": "@ai-sdk/provider", "direct": false, "version": "3.0.10", "ecosystem": "npm" }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "2.2.8", "ecosystem": "npm" }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "3.0.25", "ecosystem": "npm" }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "3.0.27", "ecosystem": "npm" }, { "name": "@ai-sdk/provider-utils", "direct": false, "version": "4.0.27", "ecosystem": "npm" }, { "name": "@esbuild/aix-ppc64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/android-arm", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/android-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/android-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/darwin-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/darwin-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/freebsd-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/freebsd-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-arm", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-ia32", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-loong64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-mips64el", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-ppc64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-riscv64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-s390x", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/linux-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/netbsd-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/netbsd-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/openbsd-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/openbsd-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/openharmony-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/sunos-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/win32-arm64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/win32-ia32", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@esbuild/win32-x64", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "@hono/node-server", "direct": false, "version": "1.19.14", "ecosystem": "npm" }, { "name": "@isaacs/ttlcache", "direct": false, "version": "2.1.5", "ecosystem": "npm" }, { "name": "@lukeed/csprng", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "@lukeed/uuid", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "@mastra/schema-compat", "direct": false, "version": "1.2.13", "ecosystem": "npm" }, { "name": "@modelcontextprotocol/sdk", "direct": false, "version": "1.29.0", "ecosystem": "npm" }, { "name": "@posthog/core", "direct": false, "version": "1.35.1", "ecosystem": "npm" }, { "name": "@posthog/types", "direct": false, "version": "1.390.0", "ecosystem": "npm" }, { "name": "@sec-ant/readable-stream", "direct": false, "version": "0.4.1", "ecosystem": "npm" }, { "name": "@sindresorhus/merge-streams", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "@sindresorhus/slugify", "direct": false, "version": "2.2.1", "ecosystem": "npm" }, { "name": "@sindresorhus/transliterate", "direct": false, "version": "1.6.0", "ecosystem": "npm" }, { "name": "@standard-schema/spec", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "@types/better-sqlite3", "direct": false, "version": "7.6.13", "ecosystem": "npm" }, { "name": "@types/debug", "direct": false, "version": "4.1.13", "ecosystem": "npm" }, { "name": "@types/mdast", "direct": false, "version": "4.0.4", "ecosystem": "npm" }, { "name": "@types/ms", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "@types/node", "direct": false, "version": "20.19.43", "ecosystem": "npm" }, { "name": "@types/unist", "direct": false, "version": "3.0.3", "ecosystem": "npm" }, { "name": "@types/uuid", "direct": false, "version": "9.0.8", "ecosystem": "npm" }, { "name": "@workflow/serde", "direct": false, "version": "4.1.0-beta.2", "ecosystem": "npm" }, { "name": "accepts", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "ajv", "direct": false, "version": "8.20.0", "ecosystem": "npm" }, { "name": "ajv-formats", "direct": false, "version": "3.0.1", "ecosystem": "npm" }, { "name": "argparse", "direct": false, "version": "1.0.10", "ecosystem": "npm" }, { "name": "bail", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "base64-js", "direct": false, "version": "1.5.1", "ecosystem": "npm" }, { "name": "bindings", "direct": false, "version": "1.5.0", "ecosystem": "npm" }, { "name": "bl", "direct": false, "version": "4.1.0", "ecosystem": "npm" }, { "name": "body-parser", "direct": false, "version": "2.3.0", "ecosystem": "npm" }, { "name": "buffer", "direct": false, "version": "5.7.1", "ecosystem": "npm" }, { "name": "bytes", "direct": false, "version": "3.1.2", "ecosystem": "npm" }, { "name": "call-bind-apply-helpers", "direct": false, "version": "1.0.2", "ecosystem": "npm" }, { "name": "call-bound", "direct": false, "version": "1.0.4", "ecosystem": "npm" }, { "name": "ccount", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "character-entities", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "chat", "direct": false, "version": "4.31.0", "ecosystem": "npm" }, { "name": "chownr", "direct": false, "version": "1.1.4", "ecosystem": "npm" }, { "name": "content-disposition", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "content-type", "direct": false, "version": "1.0.5", "ecosystem": "npm" }, { "name": "content-type", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "cookie", "direct": false, "version": "0.7.2", "ecosystem": "npm" }, { "name": "cookie-signature", "direct": false, "version": "1.2.2", "ecosystem": "npm" }, { "name": "cors", "direct": false, "version": "2.8.6", "ecosystem": "npm" }, { "name": "croner", "direct": false, "version": "10.0.1", "ecosystem": "npm" }, { "name": "cross-spawn", "direct": false, "version": "7.0.6", "ecosystem": "npm" }, { "name": "debug", "direct": false, "version": "4.4.3", "ecosystem": "npm" }, { "name": "decode-named-character-reference", "direct": false, "version": "1.3.0", "ecosystem": "npm" }, { "name": "decompress-response", "direct": false, "version": "6.0.0", "ecosystem": "npm" }, { "name": "deep-extend", "direct": false, "version": "0.6.0", "ecosystem": "npm" }, { "name": "depd", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "dequal", "direct": false, "version": "2.0.3", "ecosystem": "npm" }, { "name": "detect-libc", "direct": false, "version": "2.1.2", "ecosystem": "npm" }, { "name": "devlop", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "dotenv", "direct": false, "version": "17.4.2", "ecosystem": "npm" }, { "name": "dunder-proto", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "ee-first", "direct": false, "version": "1.1.1", "ecosystem": "npm" }, { "name": "encodeurl", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "end-of-stream", "direct": false, "version": "1.4.5", "ecosystem": "npm" }, { "name": "es-define-property", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "es-errors", "direct": false, "version": "1.3.0", "ecosystem": "npm" }, { "name": "es-object-atoms", "direct": false, "version": "1.1.2", "ecosystem": "npm" }, { "name": "esbuild", "direct": false, "version": "0.28.1", "ecosystem": "npm" }, { "name": "escape-html", "direct": false, "version": "1.0.3", "ecosystem": "npm" }, { "name": "escape-string-regexp", "direct": false, "version": "5.0.0", "ecosystem": "npm" }, { "name": "esprima", "direct": false, "version": "4.0.1", "ecosystem": "npm" }, { "name": "etag", "direct": false, "version": "1.8.1", "ecosystem": "npm" }, { "name": "eventsource", "direct": false, "version": "3.0.7", "ecosystem": "npm" }, { "name": "eventsource-parser", "direct": false, "version": "3.1.0", "ecosystem": "npm" }, { "name": "execa", "direct": false, "version": "9.6.1", "ecosystem": "npm" }, { "name": "expand-template", "direct": false, "version": "2.0.3", "ecosystem": "npm" }, { "name": "express", "direct": false, "version": "5.2.1", "ecosystem": "npm" }, { "name": "express-rate-limit", "direct": false, "version": "8.5.2", "ecosystem": "npm" }, { "name": "extend", "direct": false, "version": "3.0.2", "ecosystem": "npm" }, { "name": "extend-shallow", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "fast-deep-equal", "direct": false, "version": "3.1.3", "ecosystem": "npm" }, { "name": "fast-uri", "direct": false, "version": "3.1.2", "ecosystem": "npm" }, { "name": "fastq", "direct": false, "version": "1.20.1", "ecosystem": "npm" }, { "name": "figures", "direct": false, "version": "6.1.0", "ecosystem": "npm" }, { "name": "file-uri-to-path", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "finalhandler", "direct": false, "version": "2.1.1", "ecosystem": "npm" }, { "name": "forwarded", "direct": false, "version": "0.2.0", "ecosystem": "npm" }, { "name": "fresh", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "fs-constants", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "fsevents", "direct": false, "version": "2.3.3", "ecosystem": "npm" }, { "name": "function-bind", "direct": false, "version": "1.1.2", "ecosystem": "npm" }, { "name": "get-intrinsic", "direct": false, "version": "1.3.0", "ecosystem": "npm" }, { "name": "get-proto", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "get-stream", "direct": false, "version": "9.0.1", "ecosystem": "npm" }, { "name": "github-from-package", "direct": false, "version": "0.0.0", "ecosystem": "npm" }, { "name": "gopd", "direct": false, "version": "1.2.0", "ecosystem": "npm" }, { "name": "gray-matter", "direct": false, "version": "4.0.3", "ecosystem": "npm" }, { "name": "has-symbols", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "hasown", "direct": false, "version": "2.0.4", "ecosystem": "npm" }, { "name": "hono", "direct": false, "version": "4.12.25", "ecosystem": "npm" }, { "name": "http-errors", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "human-signals", "direct": false, "version": "8.0.1", "ecosystem": "npm" }, { "name": "iconv-lite", "direct": false, "version": "0.7.2", "ecosystem": "npm" }, { "name": "ieee754", "direct": false, "version": "1.2.1", "ecosystem": "npm" }, { "name": "ignore", "direct": false, "version": "7.0.5", "ecosystem": "npm" }, { "name": "inherits", "direct": false, "version": "2.0.4", "ecosystem": "npm" }, { "name": "ini", "direct": false, "version": "1.3.8", "ecosystem": "npm" }, { "name": "ip-address", "direct": false, "version": "10.2.0", "ecosystem": "npm" }, { "name": "ipaddr.js", "direct": false, "version": "1.9.1", "ecosystem": "npm" }, { "name": "is-extendable", "direct": false, "version": "0.1.1", "ecosystem": "npm" }, { "name": "is-network-error", "direct": false, "version": "1.3.2", "ecosystem": "npm" }, { "name": "is-plain-obj", "direct": false, "version": "4.1.0", "ecosystem": "npm" }, { "name": "is-promise", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "is-stream", "direct": false, "version": "4.0.1", "ecosystem": "npm" }, { "name": "is-unicode-supported", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "isexe", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "jose", "direct": false, "version": "6.2.3", "ecosystem": "npm" }, { "name": "jpeg-js", "direct": false, "version": "0.4.4", "ecosystem": "npm" }, { "name": "js-yaml", "direct": false, "version": "3.14.2", "ecosystem": "npm" }, { "name": "json-schema", "direct": false, "version": "0.4.0", "ecosystem": "npm" }, { "name": "json-schema-to-zod", "direct": false, "version": "2.8.1", "ecosystem": "npm" }, { "name": "json-schema-traverse", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "json-schema-typed", "direct": false, "version": "8.0.2", "ecosystem": "npm" }, { "name": "kind-of", "direct": false, "version": "6.0.3", "ecosystem": "npm" }, { "name": "longest-streak", "direct": false, "version": "3.1.0", "ecosystem": "npm" }, { "name": "lru-cache", "direct": false, "version": "11.5.1", "ecosystem": "npm" }, { "name": "markdown-table", "direct": false, "version": "3.0.4", "ecosystem": "npm" }, { "name": "math-intrinsics", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "mdast-util-find-and-replace", "direct": false, "version": "3.0.2", "ecosystem": "npm" }, { "name": "mdast-util-from-markdown", "direct": false, "version": "2.0.3", "ecosystem": "npm" }, { "name": "mdast-util-gfm", "direct": false, "version": "3.1.0", "ecosystem": "npm" }, { "name": "mdast-util-gfm-autolink-literal", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "mdast-util-gfm-footnote", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "mdast-util-gfm-strikethrough", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "mdast-util-gfm-table", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "mdast-util-gfm-task-list-item", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "mdast-util-phrasing", "direct": false, "version": "4.1.0", "ecosystem": "npm" }, { "name": "mdast-util-to-markdown", "direct": false, "version": "2.1.2", "ecosystem": "npm" }, { "name": "mdast-util-to-string", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "media-typer", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "merge-descriptors", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "micromark", "direct": false, "version": "4.0.2", "ecosystem": "npm" }, { "name": "micromark-core-commonmark", "direct": false, "version": "2.0.3", "ecosystem": "npm" }, { "name": "micromark-extension-gfm", "direct": false, "version": "3.0.0", "ecosystem": "npm" }, { "name": "micromark-extension-gfm-autolink-literal", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "micromark-extension-gfm-footnote", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "micromark-extension-gfm-strikethrough", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "micromark-extension-gfm-table", "direct": false, "version": "2.1.1", "ecosystem": "npm" }, { "name": "micromark-extension-gfm-tagfilter", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "micromark-extension-gfm-task-list-item", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "micromark-factory-destination", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-factory-label", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-factory-space", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-factory-title", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-factory-whitespace", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-character", "direct": false, "version": "2.1.1", "ecosystem": "npm" }, { "name": "micromark-util-chunked", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-classify-character", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-combine-extensions", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-decode-numeric-character-reference", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "micromark-util-decode-string", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-encode", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-html-tag-name", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-normalize-identifier", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-resolve-all", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-sanitize-uri", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-subtokenize", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "micromark-util-symbol", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "micromark-util-types", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "mime-db", "direct": false, "version": "1.54.0", "ecosystem": "npm" }, { "name": "mime-types", "direct": false, "version": "3.0.2", "ecosystem": "npm" }, { "name": "mimic-response", "direct": false, "version": "3.1.0", "ecosystem": "npm" }, { "name": "minimist", "direct": false, "version": "1.2.8", "ecosystem": "npm" }, { "name": "mkdirp-classic", "direct": false, "version": "0.5.3", "ecosystem": "npm" }, { "name": "ms", "direct": false, "version": "2.1.3", "ecosystem": "npm" }, { "name": "nanoid", "direct": false, "version": "3.3.12", "ecosystem": "npm" }, { "name": "napi-build-utils", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "negotiator", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "node-abi", "direct": false, "version": "3.92.0", "ecosystem": "npm" }, { "name": "npm-run-path", "direct": false, "version": "6.0.0", "ecosystem": "npm" }, { "name": "object-assign", "direct": false, "version": "4.1.1", "ecosystem": "npm" }, { "name": "object-inspect", "direct": false, "version": "1.13.4", "ecosystem": "npm" }, { "name": "on-finished", "direct": false, "version": "2.4.1", "ecosystem": "npm" }, { "name": "once", "direct": false, "version": "1.4.0", "ecosystem": "npm" }, { "name": "p-map", "direct": false, "version": "7.0.4", "ecosystem": "npm" }, { "name": "p-retry", "direct": false, "version": "7.1.1", "ecosystem": "npm" }, { "name": "parse-ms", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "parseurl", "direct": false, "version": "1.3.3", "ecosystem": "npm" }, { "name": "partial-json", "direct": false, "version": "0.1.7", "ecosystem": "npm" }, { "name": "path-key", "direct": false, "version": "3.1.1", "ecosystem": "npm" }, { "name": "path-key", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "path-to-regexp", "direct": false, "version": "8.4.2", "ecosystem": "npm" }, { "name": "picomatch", "direct": false, "version": "4.0.4", "ecosystem": "npm" }, { "name": "pkce-challenge", "direct": false, "version": "5.0.1", "ecosystem": "npm" }, { "name": "posthog-node", "direct": false, "version": "5.38.0", "ecosystem": "npm" }, { "name": "prebuild-install", "direct": false, "version": "7.1.3", "ecosystem": "npm" }, { "name": "pretty-ms", "direct": false, "version": "9.3.0", "ecosystem": "npm" }, { "name": "proxy-addr", "direct": false, "version": "2.0.7", "ecosystem": "npm" }, { "name": "pump", "direct": false, "version": "3.0.4", "ecosystem": "npm" }, { "name": "qs", "direct": false, "version": "6.15.2", "ecosystem": "npm" }, { "name": "range-parser", "direct": false, "version": "1.2.1", "ecosystem": "npm" }, { "name": "raw-body", "direct": false, "version": "3.0.2", "ecosystem": "npm" }, { "name": "rc", "direct": false, "version": "1.2.8", "ecosystem": "npm" }, { "name": "readable-stream", "direct": false, "version": "3.6.2", "ecosystem": "npm" }, { "name": "remark-gfm", "direct": false, "version": "4.0.1", "ecosystem": "npm" }, { "name": "remark-parse", "direct": false, "version": "11.0.0", "ecosystem": "npm" }, { "name": "remark-stringify", "direct": false, "version": "11.0.0", "ecosystem": "npm" }, { "name": "remend", "direct": false, "version": "1.3.0", "ecosystem": "npm" }, { "name": "require-from-string", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "reusify", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "router", "direct": false, "version": "2.2.0", "ecosystem": "npm" }, { "name": "safe-buffer", "direct": false, "version": "5.2.1", "ecosystem": "npm" }, { "name": "safer-buffer", "direct": false, "version": "2.1.2", "ecosystem": "npm" }, { "name": "section-matter", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "secure-json-parse", "direct": false, "version": "2.7.0", "ecosystem": "npm" }, { "name": "semver", "direct": false, "version": "7.8.4", "ecosystem": "npm" }, { "name": "send", "direct": false, "version": "1.2.1", "ecosystem": "npm" }, { "name": "serve-static", "direct": false, "version": "2.2.1", "ecosystem": "npm" }, { "name": "setprototypeof", "direct": false, "version": "1.2.0", "ecosystem": "npm" }, { "name": "shebang-command", "direct": false, "version": "2.0.0", "ecosystem": "npm" }, { "name": "shebang-regex", "direct": false, "version": "3.0.0", "ecosystem": "npm" }, { "name": "side-channel", "direct": false, "version": "1.1.1", "ecosystem": "npm" }, { "name": "side-channel-list", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "side-channel-map", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "side-channel-weakmap", "direct": false, "version": "1.0.2", "ecosystem": "npm" }, { "name": "signal-exit", "direct": false, "version": "4.1.0", "ecosystem": "npm" }, { "name": "simple-concat", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "simple-get", "direct": false, "version": "4.0.1", "ecosystem": "npm" }, { "name": "sprintf-js", "direct": false, "version": "1.0.3", "ecosystem": "npm" }, { "name": "statuses", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "string_decoder", "direct": false, "version": "1.3.0", "ecosystem": "npm" }, { "name": "strip-bom-string", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "strip-final-newline", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "strip-json-comments", "direct": false, "version": "2.0.1", "ecosystem": "npm" }, { "name": "tar-fs", "direct": false, "version": "2.1.4", "ecosystem": "npm" }, { "name": "tar-stream", "direct": false, "version": "2.2.0", "ecosystem": "npm" }, { "name": "toidentifier", "direct": false, "version": "1.0.1", "ecosystem": "npm" }, { "name": "tokenx", "direct": false, "version": "1.3.0", "ecosystem": "npm" }, { "name": "trough", "direct": false, "version": "2.2.0", "ecosystem": "npm" }, { "name": "tsx", "direct": false, "version": "4.22.4", "ecosystem": "npm" }, { "name": "tunnel-agent", "direct": false, "version": "0.6.0", "ecosystem": "npm" }, { "name": "type-is", "direct": false, "version": "2.1.0", "ecosystem": "npm" }, { "name": "typescript", "direct": false, "version": "5.9.3", "ecosystem": "npm" }, { "name": "undici-types", "direct": false, "version": "6.21.0", "ecosystem": "npm" }, { "name": "unicorn-magic", "direct": false, "version": "0.3.0", "ecosystem": "npm" }, { "name": "unified", "direct": false, "version": "11.0.5", "ecosystem": "npm" }, { "name": "unist-util-is", "direct": false, "version": "6.0.1", "ecosystem": "npm" }, { "name": "unist-util-stringify-position", "direct": false, "version": "4.0.0", "ecosystem": "npm" }, { "name": "unist-util-visit", "direct": false, "version": "5.1.0", "ecosystem": "npm" }, { "name": "unist-util-visit-parents", "direct": false, "version": "6.0.2", "ecosystem": "npm" }, { "name": "unpipe", "direct": false, "version": "1.0.0", "ecosystem": "npm" }, { "name": "util-deprecate", "direct": false, "version": "1.0.2", "ecosystem": "npm" }, { "name": "vary", "direct": false, "version": "1.1.2", "ecosystem": "npm" }, { "name": "vfile", "direct": false, "version": "6.0.3", "ecosystem": "npm" }, { "name": "vfile-message", "direct": false, "version": "4.0.3", "ecosystem": "npm" }, { "name": "which", "direct": false, "version": "2.0.2", "ecosystem": "npm" }, { "name": "wrappy", "direct": false, "version": "1.0.2", "ecosystem": "npm" }, { "name": "ws", "direct": false, "version": "8.21.0", "ecosystem": "npm" }, { "name": "xxhash-wasm", "direct": false, "version": "1.1.0", "ecosystem": "npm" }, { "name": "yoctocolors", "direct": false, "version": "2.1.2", "ecosystem": "npm" }, { "name": "zod-from-json-schema", "direct": false, "version": "0.0.5", "ecosystem": "npm" }, { "name": "zod-from-json-schema", "direct": false, "version": "0.5.3", "ecosystem": "npm" }, { "name": "zod-to-json-schema", "direct": false, "version": "3.25.2", "ecosystem": "npm" }, { "name": "zwitch", "direct": false, "version": "2.0.4", "ecosystem": "npm" } ], "collected": true, "truncated": false, "total_count": 315, "direct_count": 11, "indirect_count": 304 } }, "maintainership": { "issues": { "open_prs": 1, "merged_prs": 8, "open_issues": 19, "closed_ratio": 0.321, "closed_issues": 9, "closed_unmerged_prs": 0 }, "bus_factor": 1, "bot_contributors": 0, "top_contributors": [ { "type": "User", "login": "KalinovJim", "commits": 165, "avatar_url": "https://avatars.githubusercontent.com/u/189157289?v=4" }, { "type": "User", "login": "claude", "commits": 6, "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4" }, { "type": "User", "login": "intelogroup", "commits": 6, "avatar_url": "https://avatars.githubusercontent.com/u/64654010?v=4" } ], "contributors_sampled": 3, "top_contributor_share": 0.932 }, "quality_signals": { "has_ci": true, "has_tests": true, "ci_workflows": [ "ci.yml", "release.yml" ], "has_docs_dir": true, "linter_configs": [], "has_editorconfig": false, "has_linter_config": false, "has_precommit_config": false }, "security_signals": { "lockfiles": [ "go.sum", "package-lock.json" ], "scorecard": { "checks": [ { "name": "Binary-Artifacts", "score": 9, "reason": "binaries present in source code", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts" }, { "name": "Branch-Protection", "score": 0, "reason": "branch protection not enabled on development/release branches", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection" }, { "name": "CI-Tests", "score": 0, "reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests" }, { "name": "CII-Best-Practices", "score": 0, "reason": "no effort to earn an OpenSSF best practices badge detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices" }, { "name": "Code-Review", "score": 0, "reason": "Found 0/30 approved changesets -- score normalized to 0", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review" }, { "name": "Contributors", "score": 3, "reason": "project has 1 contributing companies or organizations -- score normalized to 3", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors" }, { "name": "Dangerous-Workflow", "score": 10, "reason": "no dangerous workflow patterns detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow" }, { "name": "Dependency-Update-Tool", "score": 0, "reason": "no update tool detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool" }, { "name": "Fuzzing", "score": 0, "reason": "project is not fuzzed", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing" }, { "name": "License", "score": 0, "reason": "license file not detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license" }, { "name": "Maintained", "score": 10, "reason": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained" }, { "name": "Packaging", "score": 10, "reason": "packaging workflow detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging" }, { "name": "Pinned-Dependencies", "score": 0, "reason": "dependency not pinned by hash detected -- score normalized to 0", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies" }, { "name": "SAST", "score": 0, "reason": "SAST tool is not run on all commits -- score normalized to 0", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast" }, { "name": "Security-Policy", "score": 0, "reason": "security policy file not detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy" }, { "name": "Signed-Releases", "score": 0, "reason": "Project has not signed or included provenance with any releases.", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases" }, { "name": "Token-Permissions", "score": 0, "reason": "detected GitHub workflow tokens with excessive permissions", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions" }, { "name": "Vulnerabilities", "score": 0, "reason": "11 existing vulnerabilities detected", "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities" } ], "commit": "efd3d2f5eba6feb7c2df9624b8206e465bb3c81a", "ran_at": "2026-07-23T22:47:41Z", "aggregate_score": 2.9, "scorecard_version": "v5.5.0" }, "has_codeql_workflow": false, "has_security_policy": false, "has_dependabot_config": false }, "contribution_flow": { "collected": true, "ci_last_run_at": "2026-07-23T22:12:49Z", "oldest_open_prs": [ { "number": 27, "created_at": "2026-06-20T17:18:41Z", "last_comment_at": "2026-06-20T17:19:00Z", "last_comment_author": "socket-security" } ], "last_merged_pr_at": "2026-07-01T21:09:29Z", "ci_last_conclusion": "SUCCESS", "oldest_open_issues": [ { "number": 6, "created_at": "2026-04-03T15:11:42Z", "last_comment_at": "2026-04-03T16:14:01Z", "last_comment_author": "intelogroup" }, { "number": 7, "created_at": "2026-04-03T16:12:49Z", "last_comment_at": "2026-04-03T16:13:44Z", "last_comment_author": "intelogroup" }, { "number": 8, "created_at": "2026-04-03T16:44:27Z", "last_comment_at": null, "last_comment_author": null }, { "number": 9, "created_at": "2026-04-03T16:46:32Z", "last_comment_at": null, "last_comment_author": null }, { "number": 12, "created_at": "2026-04-03T17:34:03Z", "last_comment_at": "2026-04-03T17:35:56Z", "last_comment_author": "KalinovJim" }, { "number": 13, "created_at": "2026-04-03T18:28:26Z", "last_comment_at": null, "last_comment_author": null }, { "number": 14, "created_at": "2026-04-03T20:55:44Z", "last_comment_at": null, "last_comment_author": null }, { "number": 16, "created_at": "2026-04-03T22:15:48Z", "last_comment_at": null, "last_comment_author": null }, { "number": 20, "created_at": "2026-04-05T18:39:42Z", "last_comment_at": null, "last_comment_author": null }, { "number": 21, "created_at": "2026-04-05T18:39:53Z", "last_comment_at": null, "last_comment_author": null }, { "number": 22, "created_at": "2026-04-05T18:40:03Z", "last_comment_at": null, "last_comment_author": null }, { "number": 23, "created_at": "2026-04-08T04:06:23Z", "last_comment_at": null, "last_comment_author": null }, { "number": 24, "created_at": "2026-04-08T05:53:46Z", "last_comment_at": null, "last_comment_author": null }, { "number": 25, "created_at": "2026-05-14T21:35:02Z", "last_comment_at": null, "last_comment_author": null }, { "number": 26, "created_at": "2026-05-19T12:07:49Z", "last_comment_at": null, "last_comment_author": null }, { "number": 29, "created_at": "2026-07-01T11:34:35Z", "last_comment_at": "2026-07-01T11:54:58Z", "last_comment_author": "intelogroup" }, { "number": 31, "created_at": "2026-07-01T12:29:27Z", "last_comment_at": null, "last_comment_author": null }, { "number": 36, "created_at": "2026-07-10T18:03:49Z", "last_comment_at": null, "last_comment_author": null }, { "number": 37, "created_at": "2026-07-19T17:20:51Z", "last_comment_at": null, "last_comment_author": null } ] } }, "config": { "disabled_metrics": [], "disabled_categories": [], "disabled_components": {} }, "source": { "url": "https://github.com/intelogroup/forgememory-cli", "host": "github.com", "name": "forgememory-cli", "owner": "intelogroup" }, "metrics": { "overall": { "key": "overall", "band": "moderate", "name": "Overall health", "note": null, "notes": [], "value": 51, "inputs": { "security": 36, "vitality": 80, "community": 24, "governance": 50, "engineering": 55 }, "components": [] }, "categories": [ { "key": "vitality", "band": "good", "name": "Vitality", "value": 80, "weight": 0.22, "metrics": [ { "key": "development_activity", "band": "good", "name": "Development activity", "note": null, "notes": [], "value": 74, "inputs": { "commits_last_year": 177, "human_commit_share": 1, "days_since_last_push": 5, "active_weeks_last_year": 14 }, "components": [ { "key": "push_recency", "name": "Push recency", "detail": "last push 5 days ago", "points": 36, "status": "met", "details": [ { "code": "push_recency", "params": { "days": 5 } } ], "max_points": 36 }, { "key": "commit_cadence", "name": "Commit cadence", "detail": "14/52 weeks with commits", "points": 9.7, "status": "partial", "details": [ { "code": "commit_cadence_weeks", "params": { "weeks": 14 } } ], "max_points": 36 }, { "key": "commit_volume", "name": "Commit volume", "detail": "177 commits in the last year", "points": 18, "status": "met", "details": [ { "code": "commits_last_year", "params": { "count": 177 } } ], "max_points": 18 }, { "key": "openssf_scorecard_maintained", "name": "OpenSSF Scorecard: Maintained", "detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10", "points": 10, "status": "met", "details": [], "max_points": 10 } ] }, { "key": "release_discipline", "band": "excellent", "name": "Release discipline", "note": null, "notes": [], "value": 90, "inputs": { "releases_count": 75, "latest_release_tag": "v0.7.2", "releases_from_tags": false, "days_since_latest_release": 5, "mean_days_between_releases": 1.9 }, "components": [ { "key": "ships_releases", "name": "Ships releases", "detail": "75 releases published", "points": 27, "status": "met", "details": [ { "code": "releases_published", "params": { "count": 75 } } ], "max_points": 27 }, { "key": "release_recency", "name": "Release recency", "detail": "latest release 5 days ago", "points": 36, "status": "met", "details": [ { "code": "release_recency", "params": { "days": 5 } } ], "max_points": 36 }, { "key": "release_cadence", "name": "Release cadence", "detail": "a release every ~1.9 days", "points": 27, "status": "met", "details": [ { "code": "release_cadence", "params": { "gap": 1.9 } } ], "max_points": 27 }, { "key": "openssf_scorecard_signed_releases", "name": "OpenSSF Scorecard: Signed-Releases", "detail": "Project has not signed or included provenance with any releases.", "points": 0, "status": "missed", "details": [], "max_points": 10 } ] }, { "key": "abandonment", "band": "excellent", "name": "Abandonment", "note": null, "notes": [], "value": 100, "inputs": { "cap": null, "state": "unverified", "guards": [], "signals": [], "red_flag": false, "multiplier_pct": 100, "declared_reason": null, "unverified_reason": "repository_too_young", "unanswered_open_prs": null, "unanswered_open_issues": null, "days_since_last_merged_pr": null, "days_since_last_human_commit": null, "days_since_last_human_commit_is_floor": false }, "components": [ { "key": "project_is_still_maintained", "name": "Project is still maintained", "detail": "maintenance record not established from the collected data", "points": 100, "status": "met", "details": [ { "code": "abandonment_unverified", "params": {} } ], "max_points": 100 } ] } ], "description": "Is the project alive — is code being written and are releases shipping?" }, { "key": "community", "band": "critical", "name": "Community & Adoption", "value": 24, "weight": 0.18, "metrics": [ { "key": "popularity", "band": "critical", "name": "Popularity & adoption", "note": null, "notes": [], "value": 1, "inputs": { "forks": 0, "stars": 1, "watchers": 0, "growth_state": "unverified", "growth_factor_pct": 100, "growth_unverified_reason": "no_history" }, "components": [ { "key": "stars", "name": "Stars", "detail": "1 stars", "points": 0, "status": "missed", "details": [ { "code": "stars", "params": { "count": 1 } } ], "max_points": 60 }, { "key": "forks", "name": "Forks", "detail": "0 forks", "points": 0, "status": "missed", "details": [ { "code": "forks", "params": { "count": 0 } } ], "max_points": 25 }, { "key": "watchers", "name": "Watchers", "detail": "0 watchers", "points": 0, "status": "missed", "details": [ { "code": "watchers", "params": { "count": 0 } } ], "max_points": 15 } ] }, { "key": "community_health", "band": "critical", "name": "Community health", "note": null, "notes": [], "value": 25, "inputs": { "has_readme": true, "has_license": false, "has_contributing": false, "has_issue_template": false, "has_code_of_conduct": false, "has_pull_request_template": false }, "components": [ { "key": "readme", "name": "README", "detail": null, "points": 22.5, "status": "met", "details": [], "max_points": 22.5 }, { "key": "license", "name": "License", "detail": "no license file detected", "points": 0, "status": "missed", "details": [ { "code": "license_absent", "params": {} } ], "max_points": 22.5 }, { "key": "contributing_guide", "name": "CONTRIBUTING guide", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 18 }, { "key": "code_of_conduct", "name": "Code of conduct", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 13.5 }, { "key": "issue_template", "name": "Issue template", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 7.2 }, { "key": "pr_template", "name": "PR template", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 6.3 } ] }, { "key": "ecosystem_adoption", "band": "moderate", "name": "Ecosystem adoption (downloads)", "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.", "notes": [ { "code": "excluded_no_data", "params": { "components": [ "registry_dependents" ] } }, { "code": "weights_renormalized", "params": {} } ], "value": 60, "inputs": { "packages": [ "forgememo-cli" ], "dependents": null, "ecosystems": "npm", "total_downloads": null, "monthly_downloads": 3843 }, "components": [ { "key": "monthly_downloads", "name": "Monthly downloads", "detail": "3,843 downloads/month across npm", "points": 47.8, "status": "partial", "details": [ { "code": "downloads_monthly", "params": { "count": 3843, "ecosystems": "npm" } } ], "max_points": 80 }, { "key": "registry_dependents", "name": "Registry dependents", "detail": "not reported by this ecosystem", "points": 0, "status": "excluded", "details": [ { "code": "not_reported_by_this_ecosystem", "params": {} } ], "max_points": 20 } ] } ], "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?" }, { "key": "governance", "band": "moderate", "name": "Sustainability & Governance", "value": 50, "weight": 0.24, "metrics": [ { "key": "maintainer_resilience", "band": "critical", "name": "Maintainer resilience (bus factor)", "note": null, "notes": [], "value": 18, "inputs": { "bus_factor": 1, "contributors_sampled": 3, "top_contributor_share": 0.932 }, "components": [ { "key": "bus_factor", "name": "Bus factor", "detail": "1 contributor(s) cover half of all commits", "points": 9, "status": "partial", "details": [ { "code": "bus_factor", "params": { "count": 1 } } ], "max_points": 54 }, { "key": "commit_distribution", "name": "Commit distribution", "detail": "top contributor authored 93% of commits", "points": 1.5, "status": "partial", "details": [ { "code": "top_contributor_share", "params": { "share": 93 } } ], "max_points": 22.5 }, { "key": "contributor_breadth", "name": "Contributor breadth", "detail": "3 contributors", "points": 4.1, "status": "partial", "details": [ { "code": "contributors_sampled", "params": { "count": 3 } } ], "max_points": 13.5 }, { "key": "openssf_scorecard_contributors", "name": "OpenSSF Scorecard: Contributors", "detail": "project has 1 contributing companies or organizations -- score normalized to 3", "points": 3, "status": "partial", "details": [], "max_points": 10 } ] }, { "key": "responsiveness", "band": "moderate", "name": "Issue & PR responsiveness", "note": null, "notes": [], "value": 53, "inputs": { "merged_prs": 8, "open_issues": 19, "closed_issues": 9, "issue_closed_ratio": 0.321, "closed_unmerged_prs": 0 }, "components": [ { "key": "issue_resolution", "name": "Issue resolution", "detail": "32% of issues closed", "points": 15, "status": "partial", "details": [ { "code": "issues_closed_share", "params": { "share": 32 } } ], "max_points": 46.75 }, { "key": "pr_acceptance", "name": "PR acceptance", "detail": "8/8 decided PRs merged", "points": 38.2, "status": "met", "details": [ { "code": "decided_prs_merged", "params": { "merged": 8, "decided": 8 } } ], "max_points": 38.25 }, { "key": "openssf_scorecard_code_review", "name": "OpenSSF Scorecard: Code-Review", "detail": "Found 0/30 approved changesets -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 15 } ] }, { "key": "stewardship", "band": "at_risk", "name": "Ownership & stewardship", "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.", "notes": [ { "code": "excluded_no_data", "params": { "components": [ "verified_domain" ] } }, { "code": "weights_renormalized", "params": {} } ], "value": 46, "inputs": { "followers": 2, "owner_type": "User", "is_verified": null, "owner_login": "intelogroup", "public_repos": 40, "account_age_days": 2274 }, "components": [ { "key": "ownership_backing", "name": "Ownership backing", "detail": "personal (user) account", "points": 10, "status": "partial", "details": [ { "code": "owner_personal", "params": {} } ], "max_points": 30 }, { "key": "verified_domain", "name": "Verified domain", "detail": "not applicable to user accounts", "points": 0, "status": "excluded", "details": [ { "code": "not_applicable_to_user_accounts", "params": {} } ], "max_points": 20 }, { "key": "owner_reach", "name": "Owner reach", "detail": "2 followers of intelogroup", "points": 3.4, "status": "partial", "details": [ { "code": "owner_followers", "params": { "count": 2, "login": "intelogroup" } } ], "max_points": 25 }, { "key": "track_record", "name": "Track record", "detail": "40 public repos, account ~6 yr old", "points": 23.7, "status": "partial", "details": [ { "code": "public_repos", "params": { "count": 40 } }, { "code": "account_age_years", "params": { "years": 6 } } ], "max_points": 25 } ] }, { "key": "package_maintenance", "band": "excellent", "name": "Package maintenance", "note": null, "notes": [], "value": 100, "inputs": { "packages": [ "forgememo-cli" ], "ecosystems": "npm", "any_deprecated": false, "min_days_since_publish": 5 }, "components": [ { "key": "published_resolvable", "name": "Published & resolvable", "detail": "1 package(s) on npm", "points": 25, "status": "met", "details": [ { "code": "packages_published", "params": { "count": 1, "ecosystems": "npm" } } ], "max_points": 25 }, { "key": "publish_recency", "name": "Publish recency", "detail": "latest publish 5 days ago", "points": 35, "status": "met", "details": [ { "code": "publish_recency", "params": { "days": 5 } } ], "max_points": 35 }, { "key": "version_history", "name": "Version history", "detail": "60 published versions", "points": 20, "status": "met", "details": [ { "code": "published_versions", "params": { "count": 60 } } ], "max_points": 20 }, { "key": "not_deprecated", "name": "Not deprecated", "detail": "active, not deprecated or yanked", "points": 20, "status": "met", "details": [ { "code": "package_not_deprecated", "params": {} } ], "max_points": 20 } ] } ], "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?" }, { "key": "engineering", "band": "moderate", "name": "Engineering Quality", "value": 55, "weight": 0.2, "metrics": [ { "key": "engineering_practices", "band": "at_risk", "name": "Engineering practices", "note": null, "notes": [], "value": 48, "inputs": { "has_ci": true, "has_tests": true, "has_editorconfig": false, "has_linter_config": false, "has_precommit_config": false }, "components": [ { "key": "ci_workflows", "name": "CI workflows", "detail": "2 workflow(s)", "points": 24, "status": "met", "details": [ { "code": "ci_workflows", "params": { "count": 2 } } ], "max_points": 24 }, { "key": "tests_present", "name": "Tests present", "detail": null, "points": 24, "status": "met", "details": [], "max_points": 24 }, { "key": "linter_config", "name": "Linter config", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 16 }, { "key": "pre_commit_hooks", "name": "Pre-commit hooks", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 9.6 }, { "key": "editorconfig", "name": ".editorconfig", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 6.4 }, { "key": "openssf_scorecard_ci_tests", "name": "OpenSSF Scorecard: CI-Tests", "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 20 } ] }, { "key": "documentation", "band": "moderate", "name": "Documentation", "note": null, "notes": [], "value": 65, "inputs": { "topics": [], "has_wiki": true, "homepage": null, "has_readme": true, "has_docs_dir": true, "has_description": false }, "components": [ { "key": "readme", "name": "README", "detail": null, "points": 30, "status": "met", "details": [], "max_points": 30 }, { "key": "documentation_directory", "name": "Documentation directory", "detail": null, "points": 25, "status": "met", "details": [], "max_points": 25 }, { "key": "documentation_homepage_site", "name": "Documentation / homepage site", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 15 }, { "key": "repository_description", "name": "Repository description", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 10 }, { "key": "topics", "name": "Topics", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 10 }, { "key": "wiki", "name": "Wiki", "detail": null, "points": 10, "status": "met", "details": [], "max_points": 10 } ] } ], "description": "Are baseline engineering and documentation practices in place?" }, { "key": "security", "band": "at_risk", "name": "Security", "value": 36, "weight": 0.16, "metrics": [ { "key": "security_posture", "band": "critical", "name": "Security posture", "note": null, "notes": [], "value": 29, "inputs": { "source": "openssf_scorecard", "checks_evaluated": 18, "scorecard_version": "v5.5.0", "checks_inconclusive": 0, "scorecard_aggregate": 2.9 }, "components": [ { "key": "binary_artifacts", "name": "Binary-Artifacts", "detail": "binaries present in source code", "points": 6.8, "status": "partial", "details": [], "max_points": 7.5 }, { "key": "branch_protection", "name": "Branch-Protection", "detail": "branch protection not enabled on development/release branches", "points": 0, "status": "missed", "details": [], "max_points": 7.5 }, { "key": "ci_tests", "name": "CI-Tests", "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 2.5 }, { "key": "cii_best_practices", "name": "CII-Best-Practices", "detail": "no effort to earn an OpenSSF best practices badge detected", "points": 0, "status": "missed", "details": [], "max_points": 2.5 }, { "key": "code_review", "name": "Code-Review", "detail": "Found 0/30 approved changesets -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 7.5 }, { "key": "contributors", "name": "Contributors", "detail": "project has 1 contributing companies or organizations -- score normalized to 3", "points": 0.8, "status": "partial", "details": [], "max_points": 2.5 }, { "key": "dangerous_workflow", "name": "Dangerous-Workflow", "detail": "no dangerous workflow patterns detected", "points": 10, "status": "met", "details": [], "max_points": 10 }, { "key": "dependency_update_tool", "name": "Dependency-Update-Tool", "detail": "no update tool detected", "points": 0, "status": "missed", "details": [], "max_points": 7.5 }, { "key": "fuzzing", "name": "Fuzzing", "detail": "project is not fuzzed", "points": 0, "status": "missed", "details": [], "max_points": 5 }, { "key": "license", "name": "License", "detail": "license file not detected", "points": 0, "status": "missed", "details": [], "max_points": 2.5 }, { "key": "maintained", "name": "Maintained", "detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10", "points": 7.5, "status": "met", "details": [], "max_points": 7.5 }, { "key": "packaging", "name": "Packaging", "detail": "packaging workflow detected", "points": 5, "status": "met", "details": [], "max_points": 5 }, { "key": "pinned_dependencies", "name": "Pinned-Dependencies", "detail": "dependency not pinned by hash detected -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 5 }, { "key": "sast", "name": "SAST", "detail": "SAST tool is not run on all commits -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 5 }, { "key": "security_policy", "name": "Security-Policy", "detail": "security policy file not detected", "points": 0, "status": "missed", "details": [], "max_points": 5 }, { "key": "signed_releases", "name": "Signed-Releases", "detail": "Project has not signed or included provenance with any releases.", "points": 0, "status": "missed", "details": [], "max_points": 7.5 }, { "key": "token_permissions", "name": "Token-Permissions", "detail": "detected GitHub workflow tokens with excessive permissions", "points": 0, "status": "missed", "details": [], "max_points": 7.5 }, { "key": "vulnerabilities", "name": "Vulnerabilities", "detail": "11 existing vulnerabilities detected", "points": 0, "status": "missed", "details": [], "max_points": 7.5 } ] }, { "key": "dependency_advisories", "band": "moderate", "name": "Dependency advisories", "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 315 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.", "notes": [ { "code": "excluded_no_data", "params": { "components": [ "indirect_dependencies_free_of_known_advisories" ] } }, { "code": "weights_renormalized", "params": {} }, { "code": "advisories_scope_repository", "params": { "assessed": 315 } }, { "code": "advisories_repo_graph_caveat", "params": {} }, { "code": "advisories_reachability", "params": {} } ], "value": 64, "inputs": { "source": "osv", "advisories": 13, "affected_packages": 9, "assessed_packages": 315, "unassessed_packages": 0, "affected_by_severity": "high 3, moderate 5, unknown 1", "direct_affected_packages": 1 }, "components": [ { "key": "direct_dependencies_free_of_known_advisories", "name": "Direct dependencies free of known advisories", "detail": "1 affected: uuid 9.0.1 (high 7.5)", "points": 14, "status": "partial", "details": [ { "code": "advisories_affected", "params": { "count": 1, "packages": "uuid 9.0.1 (high 7.5)" } } ], "max_points": 35 }, { "key": "indirect_dependencies_free_of_known_advisories", "name": "Indirect dependencies free of known advisories", "detail": "transitive set not separable from development and test dependencies in this scope", "points": 0, "status": "excluded", "details": [ { "code": "advisories_scope_not_separable", "params": {} } ], "max_points": 25 }, { "key": "no_advisories_left_outstanding", "name": "No advisories left outstanding", "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 92 days ago", "points": 33.7, "status": "partial", "details": [ { "code": "advisories_stale", "params": { "days": 90, "count": 1, "oldest": 92 } } ], "max_points": 40 } ] }, { "key": "malicious_dependencies", "band": "excellent", "name": "Malicious dependencies", "note": null, "notes": [], "value": 100, "inputs": { "source": "osv", "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored", "packages": [], "red_flag": false, "assessed_packages": 315, "malicious_packages": 0, "direct_malicious_packages": 0, "withdrawn_malicious_packages": 0, "installable_malicious_packages": 0 }, "components": [ { "key": "no_dependency_reported_as_a_malicious_package", "name": "No dependency reported as a malicious package", "detail": "no dependency is reported as a malicious package", "points": 100, "status": "met", "details": [ { "code": "no_malicious_dependencies", "params": {} } ], "max_points": 100 } ] }, { "key": "high_risk_jurisdiction_exposure", "band": "excellent", "name": "High-Risk Jurisdiction Exposure", "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.", "notes": [ { "code": "jurisdiction_evidence_limits", "params": {} } ], "value": 100, "inputs": { "meaning": "self-published location evidence; not nationality or citizenship", "red_flag": false, "exposures": [], "policy_countries": [ "Russia", "Iran", "North Korea" ], "review_only_matches": 0, "assessed_self_published_locations": 2 }, "components": [ { "key": "policy_exposure_multiplier", "name": "Policy exposure multiplier", "detail": "no confirmed policy-scope location match", "points": 100, "status": "met", "details": [ { "code": "jurisdiction_no_match", "params": {} } ], "max_points": 100 } ] } ], "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?" }, { "key": "ai_readiness", "band": "good", "name": "AI Readiness", "value": 78, "weight": 0, "metrics": [ { "key": "ai_agent_context", "band": "good", "name": "Agent context & guidance", "note": null, "notes": [], "value": 84, "inputs": { "has_llms_txt": false, "legible_history_share": 0.74, "agent_instruction_files": [ "CLAUDE.md" ], "agent_instruction_max_bytes": 2729 }, "components": [ { "key": "agent_instructions", "name": "Agent instructions", "detail": "CLAUDE.md", "points": 45, "status": "met", "details": [ { "code": "file_list", "params": { "files": "CLAUDE.md" } } ], "max_points": 45 }, { "key": "machine_readable_docs_llms_txt", "name": "Machine-readable docs (llms.txt)", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 15 }, { "key": "legible_commit_history", "name": "Legible commit history", "detail": "74 of 100 human commits state their intent (structured subject or explanatory body)", "points": 39.5, "status": "partial", "details": [ { "code": "legible_history", "params": { "legible": 74, "sampled": 100 } } ], "max_points": 40 } ] }, { "key": "ai_verify_loop", "band": "good", "name": "Verify loop (build / test / typecheck)", "note": null, "notes": [], "value": 71, "inputs": { "has_nix": false, "has_tests": true, "lockfiles": [ "go.sum", "package-lock.json" ], "has_dockerfile": false, "typed_language": false, "bootstrap_files": [ "Makefile" ], "has_devcontainer": false, "has_linter_config": false, "typecheck_configs": [ "mastra/tsconfig.json" ], "agent_commit_share": 0.33, "toolchain_manifests": [ "go.mod" ], "dependency_bot_commit_share": 0 }, "components": [ { "key": "one_command_bootstrap", "name": "One-command bootstrap", "detail": "Makefile", "points": 18, "status": "met", "details": [ { "code": "file_list", "params": { "files": "Makefile" } } ], "max_points": 18 }, { "key": "automated_tests", "name": "Automated tests", "detail": null, "points": 22, "status": "met", "details": [], "max_points": 22 }, { "key": "lint_format_config", "name": "Lint / format config", "detail": null, "points": 0, "status": "missed", "details": [], "max_points": 11 }, { "key": "static_type_checking", "name": "Static type checking", "detail": "mastra/tsconfig.json", "points": 11, "status": "met", "details": [ { "code": "file_list", "params": { "files": "mastra/tsconfig.json" } } ], "max_points": 11 }, { "key": "reproducible_environment", "name": "Reproducible environment", "detail": "lockfile", "points": 10, "status": "met", "details": [ { "code": "file_list", "params": { "files": "lockfile" } } ], "max_points": 10 }, { "key": "demonstrated_agent_practice", "name": "Demonstrated agent practice", "detail": "33 of the last 100 commits agent-authored or agent-credited", "points": 10, "status": "met", "details": [ { "code": "agent_authored_commits", "params": { "count": 33, "sampled": 100 } } ], "max_points": 10 }, { "key": "automated_maintenance", "name": "Automated maintenance", "detail": "no automated dependency updates observed", "points": 0, "status": "missed", "details": [ { "code": "no_dependency_automation", "params": {} } ], "max_points": 8 }, { "key": "openssf_scorecard_pinned_dependencies", "name": "OpenSSF Scorecard: Pinned-Dependencies", "detail": "dependency not pinned by hash detected -- score normalized to 0", "points": 0, "status": "missed", "details": [], "max_points": 10 } ] }, { "key": "ai_code_legibility", "band": "good", "name": "Code legibility for models", "note": null, "notes": [], "value": 82, "inputs": { "primary_language": "HTML", "largest_source_bytes": 60935, "source_files_sampled": 125, "oversized_source_files": 1 }, "components": [ { "key": "type_checkable_code", "name": "Type-checkable code", "detail": "HTML with type-check config (mastra/tsconfig.json)", "points": 27, "status": "partial", "details": [ { "code": "typecheck_config_language", "params": { "files": "mastra/tsconfig.json", "language": "HTML" } } ], "max_points": 45 }, { "key": "manageable_file_sizes", "name": "Manageable file sizes", "detail": "1/125 source files over 60KB", "points": 54.6, "status": "partial", "details": [ { "code": "oversized_source_files", "params": { "kb": 60, "sampled": 125, "oversized": 1 } } ], "max_points": 55 } ] } ], "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score." } ], "metrics_version": "1.13.0" }, "warnings": [ "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token", "Could not fetch go package 'github.com/forge/forge' from its registry", "Could not fetch npm package 'forge-mastra' from its registry" ], "report_type": "repository", "generated_at": "2026-07-23T22:47:52.370422Z", "schema_version": "0.27.0", "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/intelogroup/forgememory-cli.svg", "full_name": "intelogroup/forgememory-cli", "license_state": "absent", "license_spdx": null }, "repoMeta": null, "notFound": false, "related": [ { "id": 196, "full_name": "pingcap/tidb", "url": "https://github.com/pingcap/tidb", "description": "TiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.", "ecosystem": "go", "ecosystems": [ "go" ], "primary_language": "Go", "languages": [ "Go" ], "topics": [ "distributed-database", "distributed-transactions", "tidb", "database", "scale", "mysql", "htap", "sql", "cloud-native", "serverless", "mysql-compatibility", "go", "hacktoberfest", "agent", "agent-context", "agent-memory", "agentic", "ai", "memory" ], "license_spdx": "Apache-2.0", "license_state": "standard", "stars": 40293, "forks": 6212, "watchers": 1208, "monthly_downloads": null, "latest_score": 91, "latest_band": "excellent", "latest_scanned_at": "2026-07-15T20:47:15.014235Z", "has_high_risk_jurisdiction_exposure": false, "has_malicious_dependency": false, "growth_authenticity": "unverified", "abandonment_state": "unverified", "red_flags": [], "badge_url": "" }, { "id": 107, "full_name": "n8n-io/n8n", "url": "https://github.com/n8n-io/n8n", "description": "Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.", "ecosystem": "npm", "ecosystems": [ "npm" ], "primary_language": "TypeScript", "languages": [], "topics": [ "ai", "apis", "automation", "cli", "data-flow", "development", "integration-framework", "integrations", "ipaas", "low-code", "low-code-platform", "mcp", "mcp-client", "mcp-server", "n8n", "no-code", "self-hosted", "typescript", "workflow", "workflow-automation" ], "license_spdx": null, "license_state": "custom", "stars": 196209, "forks": 59293, "watchers": 1138, "monthly_downloads": 0, "latest_score": 87, "latest_band": "excellent", "latest_scanned_at": "2026-07-13T01:46:04.380428Z", "has_high_risk_jurisdiction_exposure": false, "has_malicious_dependency": false, "growth_authenticity": "unverified", "abandonment_state": "unverified", "red_flags": [], "badge_url": "" }, { "id": 111, "full_name": "langgenius/dify", "url": "https://github.com/langgenius/dify", "description": "Production-ready platform for agentic workflow development.", "ecosystem": "npm", "ecosystems": [ "npm", "pypi" ], "primary_language": "TypeScript", "languages": [], "topics": [ "agent", "agentic-ai", "agentic-framework", "agentic-workflow", "ai", "automation", "gemini", "genai", "gpt", "gpt-4", "llm", "low-code", "mcp", "nextjs", "no-code", "openai", "orchestration", "python", "rag", "workflow" ], "license_spdx": null, "license_state": "custom", "stars": 148611, "forks": 23425, "watchers": 818, "monthly_downloads": 0, "latest_score": 87, "latest_band": "excellent", "latest_scanned_at": "2026-07-13T01:49:18.026911Z", "has_high_risk_jurisdiction_exposure": false, "has_malicious_dependency": false, "growth_authenticity": "unverified", "abandonment_state": "unverified", "red_flags": [], "badge_url": "" }, { "id": 31174, "full_name": "ag2ai/ag2", "url": "https://github.com/ag2ai/ag2", "description": "AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3x", "ecosystem": "pypi", "ecosystems": [ "pypi" ], "primary_language": "Python", "languages": [ "Python", "MDX" ], "topics": [ "a2a", "agent-framework", "llm", "python", "agentic", "ai", "llms", "mcp", "multi-agent", "multi-agent-system", "genai", "agentic-ai", "ai-agents-framework", "aiagents", "open-source", "ag2", "ag2.ai", "ag2ai", "agent", "autogen" ], "license_spdx": "Apache-2.0", "license_state": "standard", "stars": 4783, "forks": 678, "watchers": 72, "monthly_downloads": 494408, "latest_score": 89, "latest_band": "excellent", "latest_scanned_at": "2026-07-21T03:45:21.669587Z", "has_high_risk_jurisdiction_exposure": false, "has_malicious_dependency": false, "growth_authenticity": "organic", "abandonment_state": "unverified", "red_flags": [], "badge_url": "" }, { "id": 30859, "full_name": "deepset-ai/haystack", "url": "https://github.com/deepset-ai/haystack", "description": "Open-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.", "ecosystem": "pypi", "ecosystems": [ "pypi", "npm" ], "primary_language": "Python", "languages": [ "Python" ], "topics": [ "nlp", "question-answering", "pytorch", "semantic-search", "information-retrieval", "summarization", "transformers", "machine-learning", "ai", "python", "large-language-models", "generative-ai", "llm", "rag", "retrieval-augmented-generation", "agents", "agent", "gemini", "gpt-4", "orchestration", "bert", "qa", "reader", "retriever", "albert", "language-model", "mrc", "roberta", "search", "squad", "transfer-learning", "transformer" ], "license_spdx": "Apache-2.0", "license_state": "standard", "stars": 25959, "forks": 2941, "watchers": 160, "monthly_downloads": 1022672, "latest_score": 93, "latest_band": "excellent", "latest_scanned_at": "2026-07-21T02:32:10.344140Z", "has_high_risk_jurisdiction_exposure": false, "has_malicious_dependency": false, "growth_authenticity": "unverified", "abandonment_state": "unverified", "red_flags": [], "badge_url": "" }, { "id": 231, "full_name": "aaif-goose/goose", "url": "https://github.com/aaif-goose/goose", "description": "an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM", "ecosystem": "crates", "ecosystems": [ "crates", "npm" ], "primary_language": "Rust", "languages": [ "Rust", "TypeScript" ], "topics": [ "mcp", "acp", "ai", "ai-agents" ], "license_spdx": "Apache-2.0", "license_state": "standard", "stars": 51252, "forks": 5693, "watchers": 325, "monthly_downloads": null, "latest_score": 89, "latest_band": "excellent", "latest_scanned_at": "2026-07-15T20:54:53.671043Z", "has_high_risk_jurisdiction_exposure": false, "has_malicious_dependency": false, "growth_authenticity": "unverified", "abandonment_state": "unverified", "red_flags": [], "badge_url": "" } ] } }
Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-23 22:47 UTC

intelogroup / forgememory-cli

HTML · GoKeine Lizenz erkannt★ 1 Stern⑂ 0 Forksseit Apr. 2026Auf GitHub ansehen ↗

intelogroup/forgememory-cli erreicht einen Gesundheitsindex von 51 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (80/100) ab, am schwächsten bei Community & Adoption (24/100). Zuletzt vor 5 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

51
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

51
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Jay_code101Persönliches Konto
2 Follower40 öffentliche Reposseit Mai 2020

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlichtTags
npmforgememo-cli0.7.23.84360vor 5 Tagenaiclaudememorymcpcliagent

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

80Gut · 22 % des Gesamtindex

Entwicklungsaktivität

74Gut
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 5 Tagen
9.7/36Commit-Rhythmus — 14/52 Wochen mit Commits
18/18Commit-Volumen — 177 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year177
human_commit_share1
days_since_last_push5
active_weeks_last_year14

Release-Disziplin

90Exzellent
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 75 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 5 Tagen
27/27Release-Rhythmus — ein Release etwa alle 1,9 Tage
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Verwendete Eingangsdaten
releases_count75
latest_release_tagv0.7.2
releases_from_tagsnein
days_since_latest_release5
mean_days_between_releases1,9

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

24Kritisch · 18 % des Gesamtindex

Popularität & Verbreitung

1Kritisch
Wie die Bewertung erfolgt
0/60Stars — 1 Stars
0/25Forks — 0 Forks
0/15Watcher — 0 Watcher
Verwendete Eingangsdaten
forks0
stars1
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community-Gesundheit

25Kritisch
Wie die Bewertung erfolgt
22.5/22.5README
0/22.5Lizenz — keine Lizenzdatei erkannt
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licensenein
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein

Ökosystem-Verbreitung (Downloads)

60Mittel
Wie die Bewertung erfolgt
47.8/80Downloads pro Monat — 3.843 Downloads/Monat über npm
0/20Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen
Verwendete Eingangsdaten
packagesforgememo-cli
dependents—
ecosystemsnpm
total_downloads—
monthly_downloads3.843
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

50Mittel · 24 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

18Kritisch
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
1.5/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 93 % der Commits
4.1/13.5Breite der Beitragenden — 3 Beitragende
3/10OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3
Verwendete Eingangsdaten
bus_factor1
contributors_sampled3
top_contributor_share0,932

Reaktionsfähigkeit bei Issues & PRs

53Mittel
Wie die Bewertung erfolgt
15/46.8Issue-Lösungsquote — 32 % der Issues geschlossen
38.2/38.3PR-Annahme — 8/8 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs8
open_issues19
closed_issues9
issue_closed_ratio0,321
closed_unmerged_prs0

Eigentümerschaft & Trägerschaft

46Gefährdet
Wie die Bewertung erfolgt
10/30Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20Verifizierte Domain — für Nutzerkonten nicht anwendbar
3.4/25Reichweite des Inhabers — 2 Follower von intelogroup
23.7/25Kontohistorie — 40 öffentliche Repos, Kontoalter ca. 6 Jahre
Verwendete Eingangsdaten
followers2
owner_typeUser
is_verified—
owner_loginintelogroup
public_repos40
account_age_days2.274
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf npm
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen
20/20Versionshistorie — 60 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesforgememo-cli
ecosystemsnpm
any_deprecatednein
min_days_since_publish5

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

55Mittel · 20 % des Gesamtindex

Engineering-Praktiken

48Gefährdet
Wie die Bewertung erfolgt
24/24CI-Workflows — 2 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein

Dokumentation

65Mittel
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
0/10Repository-Beschreibung
0/10Topics
10/10Wiki
Verwendete Eingangsdaten
topics—
has_wikija
homepage—
has_readmeja
has_docs_dirja
has_descriptionnein

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

36Gefährdet · 16 % des Gesamtindex

Sicherheitslage

29Kritisch
Wie die Bewertung erfolgt
6.8/7.5Binary-Artifacts — binaries present in source code
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
0/2.5Lizenz — license file not detected
7.5/7.5Maintained — 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 11 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate2,9

Abhängigkeits-Advisories

64Mittel
Wie die Bewertung erfolgt
14/35Direkte Abhängigkeiten ohne bekannte Advisories — 1 betroffen: uuid 9.0.1 (high 7.5)
0/25Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
33.7/40Keine offenen Advisories — 1 Paket(e) mit Advisory seit über 90 Tagen unbehandelt; ältestes vor 92 Tagen veröffentlicht
Verwendete Eingangsdaten
sourceosv
advisories13
affected_packages9
assessed_packages315
unassessed_packages0
affected_by_severityhigh 3, moderate 5, unknown 1
direct_affected_packages1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories. Die verbleibenden Gewichte wurden renormalisiert. 315 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

78Gut · 0 % des Gesamtindex

AI-Agentenkontext & Leitlinien

84Gut
Wie die Bewertung erfolgt
45/45Agentenanweisungen — CLAUDE.md
0/15Maschinenlesbare Doku (llms.txt)
39.5/40Lesbare Commit-Historie — 74 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,74
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes2.729

AI-Verify-Loop (Build / Test / Typprüfung)

71Gut
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — Makefile
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — mastra/tsconfig.json
10/10Reproduzierbare Umgebung — lockfile
10/10Belegte Agentenpraxis — 33 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilesgo.sum, package-lock.json
has_dockerfilenein
typed_languagenein
bootstrap_filesMakefile
has_devcontainernein
has_linter_confignein
typecheck_configsmastra/tsconfig.json
agent_commit_share0,33
toolchain_manifestsgo.mod
dependency_bot_commit_share0

AI-Code-Lesbarkeit für Modelle

82Gut
Wie die Bewertung erfolgt
27/45Typprüfbarer Code — HTML mit Typprüfungs-Konfiguration (mastra/tsconfig.json)
54.6/55Handhabbare Dateigrößen — 1/125 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageHTML
largest_source_bytes60.935
source_files_sampled125
oversized_source_files1

Eckdaten

1GitHub-Sterne
3Mitwirkende
177Commits, letzte 12 Monate
5Tage seit letztem Push
75Releases
1Bus-Faktor
19offene Issues
Go, npmPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch go package 'github.com/forge/forge' from its registry
  • Could not fetch npm package 'forge-mastra' from its registry

Weitere Details

OpenSSF Scorecard 2.9 / 10
2.9Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-23 22:47 UTC

9Binary-Artifactsbinaries present in source code
0Branch-Protectionbranch protection not enabled on development/release branches
0CI-Tests0 out of 2 merged PRs checked by a CI test -- score normalized to 0
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
0Licenselicense file not detected
10Maintained30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities11 existing vulnerabilities detected
Direkte Abhängigkeiten 9
RegistryPaketVersionsvorgabeManifest
Gogithub.com/google/uuidv1.6.0go.mod
Gomodernc.org/sqlitev1.48.0go.mod
npm@mastra/core^1.41.0mastra/package.json
npm@ai-sdk/openai^2.0.0mastra/package.json
npm@ai-sdk/anthropic^2.0.0mastra/package.json
npmollama-ai-provider^1.0.0mastra/package.json
npmbetter-sqlite3^11.0.0mastra/package.json
npmzod^3.22.0mastra/package.json
npmuuid^9.0.0mastra/package.json
Alle Abhängigkeiten 315

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 11 direkte und 304 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Gogithub.com/google/uuidv1.6.0direkt
Gomodernc.org/sqlitev1.48.0direkt
npm@ai-sdk/anthropic2.0.83direkt
npm@ai-sdk/openai2.0.108direkt
npm@mastra/core1.43.0direkt
npmbetter-sqlite311.10.0direkt
npmollama-ai-provider1.2.0direkt
npmuuid11.1.1direkt
npmuuid9.0.1direkt
npmzod3.25.76direkt
npmzod4.4.3direkt
Gogithub.com/danieljoos/wincredv1.2.3indirekt
Gogithub.com/dustin/go-humanizev1.0.1indirekt
Gogithub.com/godbus/dbus/v5v5.2.2indirekt
Gogithub.com/mattn/go-isattyv0.0.20indirekt
Gogithub.com/ncruces/go-strftimev1.0.0indirekt
Gogithub.com/remyoudompheng/bigfftv0.0.0-20230129092748-24d4a6f8daecindirekt
Gogithub.com/zalando/go-keyringv0.2.8indirekt
Gogolang.org/x/sysv0.42.0indirekt
Gomodernc.org/libcv1.70.0indirekt
Gomodernc.org/mathutilv1.7.1indirekt
Gomodernc.org/memoryv1.11.0indirekt
npm@a2a-js/sdk0.3.13indirekt
npm@ai-sdk/provider1.1.3indirekt
npm@ai-sdk/provider2.0.3indirekt
npm@ai-sdk/provider3.0.10indirekt
npm@ai-sdk/provider-utils2.2.8indirekt
npm@ai-sdk/provider-utils3.0.25indirekt
npm@ai-sdk/provider-utils3.0.27indirekt
npm@ai-sdk/provider-utils4.0.27indirekt
npm@esbuild/aix-ppc640.28.1indirekt
npm@esbuild/android-arm0.28.1indirekt
npm@esbuild/android-arm640.28.1indirekt
npm@esbuild/android-x640.28.1indirekt
npm@esbuild/darwin-arm640.28.1indirekt
npm@esbuild/darwin-x640.28.1indirekt
npm@esbuild/freebsd-arm640.28.1indirekt
npm@esbuild/freebsd-x640.28.1indirekt
npm@esbuild/linux-arm0.28.1indirekt
npm@esbuild/linux-arm640.28.1indirekt
npm@esbuild/linux-ia320.28.1indirekt
npm@esbuild/linux-loong640.28.1indirekt
npm@esbuild/linux-mips64el0.28.1indirekt
npm@esbuild/linux-ppc640.28.1indirekt
npm@esbuild/linux-riscv640.28.1indirekt
npm@esbuild/linux-s390x0.28.1indirekt
npm@esbuild/linux-x640.28.1indirekt
npm@esbuild/netbsd-arm640.28.1indirekt
npm@esbuild/netbsd-x640.28.1indirekt
npm@esbuild/openbsd-arm640.28.1indirekt
npm@esbuild/openbsd-x640.28.1indirekt
npm@esbuild/openharmony-arm640.28.1indirekt
npm@esbuild/sunos-x640.28.1indirekt
npm@esbuild/win32-arm640.28.1indirekt
npm@esbuild/win32-ia320.28.1indirekt
npm@esbuild/win32-x640.28.1indirekt
npm@hono/node-server1.19.14indirekt
npm@isaacs/ttlcache2.1.5indirekt
npm@lukeed/csprng1.1.0indirekt
npm@lukeed/uuid2.0.1indirekt
npm@mastra/schema-compat1.2.13indirekt
npm@modelcontextprotocol/sdk1.29.0indirekt
npm@posthog/core1.35.1indirekt
npm@posthog/types1.390.0indirekt
npm@sec-ant/readable-stream0.4.1indirekt
npm@sindresorhus/merge-streams4.0.0indirekt
npm@sindresorhus/slugify2.2.1indirekt
npm@sindresorhus/transliterate1.6.0indirekt
npm@standard-schema/spec1.1.0indirekt
npm@types/better-sqlite37.6.13indirekt
npm@types/debug4.1.13indirekt
npm@types/mdast4.0.4indirekt
npm@types/ms2.1.0indirekt
npm@types/node20.19.43indirekt
npm@types/unist3.0.3indirekt
npm@types/uuid9.0.8indirekt
npm@workflow/serde4.1.0-beta.2indirekt
npmaccepts2.0.0indirekt
npmajv8.20.0indirekt
npmajv-formats3.0.1indirekt
npmargparse1.0.10indirekt
npmbail2.0.2indirekt
npmbase64-js1.5.1indirekt
npmbindings1.5.0indirekt
npmbl4.1.0indirekt
npmbody-parser2.3.0indirekt
npmbuffer5.7.1indirekt
npmbytes3.1.2indirekt
npmcall-bind-apply-helpers1.0.2indirekt
npmcall-bound1.0.4indirekt
npmccount2.0.1indirekt
npmcharacter-entities2.0.2indirekt
npmchat4.31.0indirekt
npmchownr1.1.4indirekt
npmcontent-disposition1.1.0indirekt
npmcontent-type1.0.5indirekt
npmcontent-type2.0.0indirekt
npmcookie0.7.2indirekt
npmcookie-signature1.2.2indirekt
npmcors2.8.6indirekt
npmcroner10.0.1indirekt
npmcross-spawn7.0.6indirekt
npmdebug4.4.3indirekt
npmdecode-named-character-reference1.3.0indirekt
npmdecompress-response6.0.0indirekt
npmdeep-extend0.6.0indirekt
npmdepd2.0.0indirekt
npmdequal2.0.3indirekt
npmdetect-libc2.1.2indirekt
npmdevlop1.1.0indirekt
npmdotenv17.4.2indirekt
npmdunder-proto1.0.1indirekt
npmee-first1.1.1indirekt
npmencodeurl2.0.0indirekt
npmend-of-stream1.4.5indirekt
npmes-define-property1.0.1indirekt
npmes-errors1.3.0indirekt
npmes-object-atoms1.1.2indirekt
npmesbuild0.28.1indirekt
npmescape-html1.0.3indirekt
npmescape-string-regexp5.0.0indirekt
npmesprima4.0.1indirekt
npmetag1.8.1indirekt
npmeventsource3.0.7indirekt
npmeventsource-parser3.1.0indirekt
npmexeca9.6.1indirekt
npmexpand-template2.0.3indirekt
npmexpress5.2.1indirekt
npmexpress-rate-limit8.5.2indirekt
npmextend3.0.2indirekt
npmextend-shallow2.0.1indirekt
npmfast-deep-equal3.1.3indirekt
npmfast-uri3.1.2indirekt
npmfastq1.20.1indirekt
npmfigures6.1.0indirekt
npmfile-uri-to-path1.0.0indirekt
npmfinalhandler2.1.1indirekt
npmforwarded0.2.0indirekt
npmfresh2.0.0indirekt
npmfs-constants1.0.0indirekt
npmfsevents2.3.3indirekt
npmfunction-bind1.1.2indirekt
npmget-intrinsic1.3.0indirekt
npmget-proto1.0.1indirekt
npmget-stream9.0.1indirekt
npmgithub-from-package0.0.0indirekt
npmgopd1.2.0indirekt
npmgray-matter4.0.3indirekt
npmhas-symbols1.1.0indirekt
npmhasown2.0.4indirekt
npmhono4.12.25indirekt
npmhttp-errors2.0.1indirekt
npmhuman-signals8.0.1indirekt
npmiconv-lite0.7.2indirekt
npmieee7541.2.1indirekt
npmignore7.0.5indirekt
npminherits2.0.4indirekt
npmini1.3.8indirekt
npmip-address10.2.0indirekt
npmipaddr.js1.9.1indirekt
npmis-extendable0.1.1indirekt
npmis-network-error1.3.2indirekt
npmis-plain-obj4.1.0indirekt
npmis-promise4.0.0indirekt
npmis-stream4.0.1indirekt
npmis-unicode-supported2.1.0indirekt
npmisexe2.0.0indirekt
npmjose6.2.3indirekt
npmjpeg-js0.4.4indirekt
npmjs-yaml3.14.2indirekt
npmjson-schema0.4.0indirekt
npmjson-schema-to-zod2.8.1indirekt
npmjson-schema-traverse1.0.0indirekt
npmjson-schema-typed8.0.2indirekt
npmkind-of6.0.3indirekt
npmlongest-streak3.1.0indirekt
npmlru-cache11.5.1indirekt
npmmarkdown-table3.0.4indirekt
npmmath-intrinsics1.1.0indirekt
npmmdast-util-find-and-replace3.0.2indirekt
npmmdast-util-from-markdown2.0.3indirekt
npmmdast-util-gfm3.1.0indirekt
npmmdast-util-gfm-autolink-literal2.0.1indirekt
npmmdast-util-gfm-footnote2.1.0indirekt
npmmdast-util-gfm-strikethrough2.0.0indirekt
npmmdast-util-gfm-table2.0.0indirekt
npmmdast-util-gfm-task-list-item2.0.0indirekt
npmmdast-util-phrasing4.1.0indirekt
npmmdast-util-to-markdown2.1.2indirekt
npmmdast-util-to-string4.0.0indirekt
npmmedia-typer1.1.0indirekt
npmmerge-descriptors2.0.0indirekt
npmmicromark4.0.2indirekt
npmmicromark-core-commonmark2.0.3indirekt
npmmicromark-extension-gfm3.0.0indirekt
npmmicromark-extension-gfm-autolink-literal2.1.0indirekt
npmmicromark-extension-gfm-footnote2.1.0indirekt
npmmicromark-extension-gfm-strikethrough2.1.0indirekt
npmmicromark-extension-gfm-table2.1.1indirekt
npmmicromark-extension-gfm-tagfilter2.0.0indirekt
npmmicromark-extension-gfm-task-list-item2.1.0indirekt
npmmicromark-factory-destination2.0.1indirekt
npmmicromark-factory-label2.0.1indirekt
npmmicromark-factory-space2.0.1indirekt
npmmicromark-factory-title2.0.1indirekt
npmmicromark-factory-whitespace2.0.1indirekt
npmmicromark-util-character2.1.1indirekt
npmmicromark-util-chunked2.0.1indirekt
npmmicromark-util-classify-character2.0.1indirekt
npmmicromark-util-combine-extensions2.0.1indirekt
npmmicromark-util-decode-numeric-character-reference2.0.2indirekt
npmmicromark-util-decode-string2.0.1indirekt
npmmicromark-util-encode2.0.1indirekt
npmmicromark-util-html-tag-name2.0.1indirekt
npmmicromark-util-normalize-identifier2.0.1indirekt
npmmicromark-util-resolve-all2.0.1indirekt
npmmicromark-util-sanitize-uri2.0.1indirekt
npmmicromark-util-subtokenize2.1.0indirekt
npmmicromark-util-symbol2.0.1indirekt
npmmicromark-util-types2.0.2indirekt
npmmime-db1.54.0indirekt
npmmime-types3.0.2indirekt
npmmimic-response3.1.0indirekt
npmminimist1.2.8indirekt
npmmkdirp-classic0.5.3indirekt
npmms2.1.3indirekt
npmnanoid3.3.12indirekt
npmnapi-build-utils2.0.0indirekt
npmnegotiator1.0.0indirekt
npmnode-abi3.92.0indirekt
npmnpm-run-path6.0.0indirekt
npmobject-assign4.1.1indirekt
npmobject-inspect1.13.4indirekt
npmon-finished2.4.1indirekt
npmonce1.4.0indirekt
npmp-map7.0.4indirekt
npmp-retry7.1.1indirekt
npmparse-ms4.0.0indirekt
npmparseurl1.3.3indirekt
npmpartial-json0.1.7indirekt
npmpath-key3.1.1indirekt
npmpath-key4.0.0indirekt
npmpath-to-regexp8.4.2indirekt
npmpicomatch4.0.4indirekt
npmpkce-challenge5.0.1indirekt
npmposthog-node5.38.0indirekt
npmprebuild-install7.1.3indirekt
npmpretty-ms9.3.0indirekt
npmproxy-addr2.0.7indirekt
npmpump3.0.4indirekt
npmqs6.15.2indirekt
npmrange-parser1.2.1indirekt
npmraw-body3.0.2indirekt
npmrc1.2.8indirekt
npmreadable-stream3.6.2indirekt
npmremark-gfm4.0.1indirekt
npmremark-parse11.0.0indirekt
npmremark-stringify11.0.0indirekt
npmremend1.3.0indirekt
npmrequire-from-string2.0.2indirekt
npmreusify1.1.0indirekt
npmrouter2.2.0indirekt
npmsafe-buffer5.2.1indirekt
npmsafer-buffer2.1.2indirekt
npmsection-matter1.0.0indirekt
npmsecure-json-parse2.7.0indirekt
npmsemver7.8.4indirekt
npmsend1.2.1indirekt
npmserve-static2.2.1indirekt
npmsetprototypeof1.2.0indirekt
npmshebang-command2.0.0indirekt
npmshebang-regex3.0.0indirekt
npmside-channel1.1.1indirekt
npmside-channel-list1.0.1indirekt
npmside-channel-map1.0.1indirekt
npmside-channel-weakmap1.0.2indirekt
npmsignal-exit4.1.0indirekt
npmsimple-concat1.0.1indirekt
npmsimple-get4.0.1indirekt
npmsprintf-js1.0.3indirekt
npmstatuses2.0.2indirekt
npmstring_decoder1.3.0indirekt
npmstrip-bom-string1.0.0indirekt
npmstrip-final-newline4.0.0indirekt
npmstrip-json-comments2.0.1indirekt
npmtar-fs2.1.4indirekt
npmtar-stream2.2.0indirekt
npmtoidentifier1.0.1indirekt
npmtokenx1.3.0indirekt
npmtrough2.2.0indirekt
npmtsx4.22.4indirekt
npmtunnel-agent0.6.0indirekt
npmtype-is2.1.0indirekt
npmtypescript5.9.3indirekt
npmundici-types6.21.0indirekt
npmunicorn-magic0.3.0indirekt
npmunified11.0.5indirekt
npmunist-util-is6.0.1indirekt
npmunist-util-stringify-position4.0.0indirekt
npmunist-util-visit5.1.0indirekt
npmunist-util-visit-parents6.0.2indirekt
npmunpipe1.0.0indirekt
npmutil-deprecate1.0.2indirekt
npmvary1.1.2indirekt
npmvfile6.0.3indirekt
npmvfile-message4.0.3indirekt
npmwhich2.0.2indirekt
npmwrappy1.0.2indirekt
npmws8.21.0indirekt
npmxxhash-wasm1.1.0indirekt
npmyoctocolors2.1.2indirekt
npmzod-from-json-schema0.0.5indirekt
npmzod-from-json-schema0.5.3indirekt
npmzod-to-json-schema3.25.2indirekt
npmzwitch2.0.4indirekt
Abhängigkeits-Advisories 9

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 315 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 9 tragen bekannte Advisories, davon 1 direkte.

PaketVersionBeziehungSchweregradAdvisoriesBehoben in
uuid9.0.1direkthoch113.0.1
fast-uri3.1.2indirekthoch24.1.1
js-yaml3.14.2indirekthoch24.3.0
@ai-sdk/provider-utils2.2.8indirektmittel1—
@ai-sdk/provider-utils3.0.25indirektmittel1—
@ai-sdk/provider-utils3.0.27indirektmittel1—
@hono/node-server1.19.14indirektmittel12.0.5
hono4.12.25indirektmittel34.12.27
golang.org/x/sysv0.42.0indirektunbekannt10.44.0

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 79833,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 939832,
        "HTML": 1754194,
        "Ruby": 1165,
        "Shell": 54164,
        "Makefile": 1255,
        "JavaScript": 11128,
        "PowerShell": 2076,
        "TypeScript": 46421
      },
      "pushed_at": "2026-07-18T14:57:30Z",
      "created_at": "2026-04-03T00:32:37Z",
      "owner_type": "User",
      "updated_at": "2026-07-18T14:57:34Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "HTML",
      "significant_languages": [
        "HTML",
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Jay_code101",
      "type": "User",
      "login": "intelogroup",
      "company": null,
      "location": "USA",
      "followers": 2,
      "avatar_url": "https://avatars.githubusercontent.com/u/64654010?v=4",
      "created_at": "2020-05-01T16:27:01Z",
      "is_verified": null,
      "public_repos": 40,
      "account_age_days": 2274
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2026-07-18T15:01:46Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-07-16T21:21:45Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-07-16T16:43:42Z"
        },
        {
          "tag": "v0.6.6",
          "kind": "patch",
          "published_at": "2026-07-16T15:22:17Z"
        },
        {
          "tag": "v0.6.5",
          "kind": "patch",
          "published_at": "2026-07-15T18:36:51Z"
        },
        {
          "tag": "v0.6.4",
          "kind": "patch",
          "published_at": "2026-07-14T17:06:45Z"
        },
        {
          "tag": "v0.6.3",
          "kind": "patch",
          "published_at": "2026-07-11T00:58:57Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-07-02T17:06:07Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-07-01T21:13:18Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-01T20:35:48Z"
        },
        {
          "tag": "v0.5.16",
          "kind": "patch",
          "published_at": "2026-07-01T14:12:12Z"
        },
        {
          "tag": "v0.5.15",
          "kind": "patch",
          "published_at": "2026-07-01T13:58:29Z"
        },
        {
          "tag": "v0.5.14",
          "kind": "patch",
          "published_at": "2026-07-01T13:19:01Z"
        },
        {
          "tag": "v0.5.13",
          "kind": "patch",
          "published_at": "2026-07-01T12:45:29Z"
        },
        {
          "tag": "v0.5.12",
          "kind": "patch",
          "published_at": "2026-07-01T12:16:17Z"
        },
        {
          "tag": "v0.5.10",
          "kind": "patch",
          "published_at": "2026-07-01T11:21:09Z"
        },
        {
          "tag": "v0.5.9",
          "kind": "patch",
          "published_at": "2026-07-01T02:01:25Z"
        },
        {
          "tag": "v0.5.8",
          "kind": "patch",
          "published_at": "2026-06-22T00:33:02Z"
        },
        {
          "tag": "v0.5.7",
          "kind": "patch",
          "published_at": "2026-06-20T17:23:05Z"
        },
        {
          "tag": "v0.5.6",
          "kind": "patch",
          "published_at": "2026-06-20T16:41:16Z"
        },
        {
          "tag": "v0.5.5",
          "kind": "patch",
          "published_at": "2026-06-20T16:06:32Z"
        },
        {
          "tag": "v0.5.4",
          "kind": "patch",
          "published_at": "2026-06-17T17:54:15Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2026-05-21T19:32:42Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-05-18T21:05:23Z"
        },
        {
          "tag": "v0.4.41",
          "kind": "patch",
          "published_at": "2026-05-12T15:36:30Z"
        },
        {
          "tag": "v0.4.40",
          "kind": "patch",
          "published_at": "2026-05-07T19:55:58Z"
        },
        {
          "tag": "v0.4.39",
          "kind": "patch",
          "published_at": "2026-05-07T19:32:36Z"
        },
        {
          "tag": "v0.4.38",
          "kind": "patch",
          "published_at": "2026-05-07T18:52:34Z"
        },
        {
          "tag": "v0.4.37",
          "kind": "patch",
          "published_at": "2026-04-29T20:26:24Z"
        },
        {
          "tag": "v0.4.36",
          "kind": "patch",
          "published_at": "2026-04-29T19:05:34Z"
        },
        {
          "tag": "v0.4.35",
          "kind": "patch",
          "published_at": "2026-04-29T18:54:42Z"
        },
        {
          "tag": "v0.4.34",
          "kind": "patch",
          "published_at": "2026-04-29T17:39:41Z"
        },
        {
          "tag": "v0.4.33",
          "kind": "patch",
          "published_at": "2026-04-29T16:56:15Z"
        },
        {
          "tag": "v0.4.32",
          "kind": "patch",
          "published_at": "2026-04-29T15:42:44Z"
        },
        {
          "tag": "v0.4.31",
          "kind": "patch",
          "published_at": "2026-04-29T14:53:27Z"
        },
        {
          "tag": "v0.4.29",
          "kind": "patch",
          "published_at": "2026-04-18T20:49:55Z"
        },
        {
          "tag": "v0.4.27",
          "kind": "patch",
          "published_at": "2026-04-10T01:05:51Z"
        },
        {
          "tag": "v0.4.25",
          "kind": "patch",
          "published_at": "2026-04-08T06:52:48Z"
        },
        {
          "tag": "v0.4.24",
          "kind": "patch",
          "published_at": "2026-04-08T06:27:12Z"
        },
        {
          "tag": "v0.4.23",
          "kind": "patch",
          "published_at": "2026-04-07T16:11:29Z"
        },
        {
          "tag": "v0.4.22",
          "kind": "patch",
          "published_at": "2026-04-06T21:38:55Z"
        },
        {
          "tag": "v0.4.20",
          "kind": "patch",
          "published_at": "2026-04-06T16:17:56Z"
        },
        {
          "tag": "v0.4.18",
          "kind": "patch",
          "published_at": "2026-04-06T15:38:50Z"
        },
        {
          "tag": "v0.4.17",
          "kind": "patch",
          "published_at": "2026-04-06T14:41:31Z"
        },
        {
          "tag": "v0.4.16",
          "kind": "patch",
          "published_at": "2026-04-06T06:17:34Z"
        },
        {
          "tag": "v0.4.14",
          "kind": "patch",
          "published_at": "2026-04-05T18:30:09Z"
        },
        {
          "tag": "v0.4.13",
          "kind": "patch",
          "published_at": "2026-04-05T18:20:33Z"
        },
        {
          "tag": "v0.4.11",
          "kind": "patch",
          "published_at": "2026-04-05T17:21:46Z"
        },
        {
          "tag": "v0.4.10",
          "kind": "patch",
          "published_at": "2026-04-04T19:31:06Z"
        },
        {
          "tag": "v0.4.8",
          "kind": "patch",
          "published_at": "2026-04-04T19:13:47Z"
        },
        {
          "tag": "v0.4.7",
          "kind": "patch",
          "published_at": "2026-04-04T19:10:20Z"
        },
        {
          "tag": "v0.4.6",
          "kind": "patch",
          "published_at": "2026-04-04T15:58:19Z"
        },
        {
          "tag": "v0.4.5",
          "kind": "patch",
          "published_at": "2026-04-04T00:03:22Z"
        },
        {
          "tag": "v0.4.4",
          "kind": "patch",
          "published_at": "2026-04-03T22:28:24Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2026-04-03T22:11:23Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2026-04-03T21:51:49Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-04-03T20:53:44Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-04-03T20:48:34Z"
        },
        {
          "tag": "v0.3.9",
          "kind": "patch",
          "published_at": "2026-04-03T20:44:05Z"
        },
        {
          "tag": "v0.3.8",
          "kind": "patch",
          "published_at": "2026-04-03T20:40:03Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-04-03T20:25:02Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-04-03T20:09:37Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-04-03T18:44:21Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-04-03T17:59:06Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-04-03T17:36:58Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-04-03T17:20:27Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-04-03T17:01:28Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-04-03T16:00:16Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-04-03T14:33:41Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-04-03T14:30:53Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-04-03T14:11:43Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-04-03T13:38:34Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-04-03T13:32:48Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-04-03T12:22:03Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-04-03T00:36:06Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "efd3d2f5eba6feb7c2df9624b8206e465bb3c81a",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.7.2",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-18T14:57:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "657a25f1f8b3c0123a90046796cc320d9e363a12",
          "body": null,
          "is_bot": false,
          "headline": "bump v0.7.1 - fix session_id parsing for opencode/antigravity hooks",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-16T21:17:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb824a8bc5e662cd1fef008e54c3edff773638ba",
          "body": null,
          "is_bot": false,
          "headline": "gitignore: add graphify-out/",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-16T16:44:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f69491b8169f16f0bbbf2706ba36f61dc5e74717",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.7.0 — free tool, remove payment server + login",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-16T16:39:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0aeabc8f561afc004e3c88e7ed20a3abd620f55d",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.6.6 — inject-check pre-push, auto-relevant context",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-16T15:19:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a433ce4cef8589321f5676603e9beee14a97ac5",
          "body": "Principles are now HMAC-signed (internal/security, keychain-backed with a\nchmod-600 file fallback) and their narrative is encrypted at rest\n(AES-256-GCM). A tampered or undecryptable row is dropped on read instead of\nserved, and `forge harden rotate-key`/`revoke` give a recovery path if the\nkey is e\n[…]\ns to pay a cold ~500ms keychain fetch on every invocation that reads\nsession events. Documented in TODO-HARDENING.md so it isn't retried blind.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.6.5 — keychain-backed signing, principle encryption at rest",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-15T18:33:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fdfbf16ad1b8d47b0ba46523dfdcef69135294fb",
          "body": "…nt distill floor\n\nContext was being re-injected via additionalContext on every UserPromptSubmit,\nincluding repeated-failure alerts, docs hints, and low-value prompt matches on\nevery later message in a session — now only fires once, on the session's first\nevent; background retrieval still runs so di\n[…]\ngured (or overridden via\n--batch-size) below 300, running tiny undersized batches. Config load,\n`forge config --distill-batch-size`, and `forge distill --batch-size` now all\nenforce a 300-event floor.",
          "is_bot": false,
          "headline": "release: v0.6.4 — stop per-message context injection, enforce 300-eve…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-14T17:04:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c661137abd9240eee598b79fc07678bd03a521a1",
          "body": null,
          "is_bot": false,
          "headline": "npm: bump version to v0.6.3",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-11T00:31:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41c2269ce35b16a874d28010f0070a8723a18645",
          "body": null,
          "is_bot": false,
          "headline": "distill: bump to v0.6.3 and fix backlog drain bugs",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-11T00:18:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c65ddd7b2fd041515449e8ece8e574c61b24239d",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to 0.6.2 and implement surgical context injection",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-02T17:03:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae571b7eec1c0a798f365dd2118912ca240c534f",
          "body": "… (#35)",
          "is_bot": false,
          "headline": "release: v0.6.1 — fix silent distill no-op on unknown-session backlog…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T21:10:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fe0caf2c723da896409de1bd834774b01a961d0",
          "body": "…-op (#35)\n\n* fix(distill): drain session_id='unknown' backlog instead of silent no-op (#34)\n\nDistillation silently no-oped when the whole undistilled backlog had\nsession_id='unknown': UndistilledEvents filtered them out, returned\nnil, DistillBatch returned (0, nil) with zero LLM calls, and\nrunDisti\n[…]\n nil\npath: print 'Drain stalled. ...' to stderr and os.Exit(1) so callers\n(e.g. --wait flow) can distinguish a real stall from a clean drain.\n\n---------\n\nCo-authored-by: jimkali <kalinovjim@gmail.com>",
          "is_bot": false,
          "headline": "fix(distill): drain session_id='unknown' backlog instead of silent no…",
          "author_name": "Jay_code101",
          "author_login": "intelogroup",
          "committed_at": "2026-07-01T21:09:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6dd21c071a6a8eab92afff64dfe414717aa7f4b1",
          "body": "- distill lock TTL reclaim (30m): stale even with live PID, protects\n  against leaked forge distill zombies + PID reuse\n- daemon startup clears orphaned forge.distill.lock unconditionally\n- skip-tracker + WEDGED health marker after 3 consecutive skipped\n  cycles; writes failure record so forge statu\n[…]\n.\n\nDeferred to follow-up PRs: #29.1 base-url compat, #29.2 config source\nunify, #29.5 doctor false positive, #29.6 integration-sync confirmation\ngate (security), #31 DX docs, #32 env-override warning.",
          "is_bot": false,
          "headline": "release: v0.6.0 — fix silent distill scheduler wedge (#33)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T20:32:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be243680138589fc41d4e0eb678c5e5146e2062f",
          "body": null,
          "is_bot": false,
          "headline": "ci: serialize Windows unit tests with -p 1 -parallel 1 to prevent OOM",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T15:00:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "836c6ed66058e2c0eaa1aea7e927256925949e63",
          "body": null,
          "is_bot": false,
          "headline": "fix(config): prioritize ~/.forge/config over env variables in LoadConfig",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T14:09:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49381eda798afb2bb0ddd92ea212cf2133b5e1aa",
          "body": null,
          "is_bot": false,
          "headline": "fix(daemon): isolate env and skip unconfigured exa searches",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T13:55:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3d20ecb0bbd7db22066e3157413d17579ce16f9",
          "body": "…l interleaving fragmentation",
          "is_bot": false,
          "headline": "fix(distill): query oldest undistilled session first to avoid tempora…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T13:15:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "410a9a6ec27aa71f6ac73b20f860140b3fb1f143",
          "body": null,
          "is_bot": false,
          "headline": "release: bump version to v0.5.13",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T12:42:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63662f2e75cb76fb62dcd22f31b95474d239e988",
          "body": "…s distilled, and ignore unknown sessions",
          "is_bot": false,
          "headline": "fix(distill): prevent queue clogging by unconditionally marking event…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T12:42:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa2ae905e6346ed4032e6f17e22fdee708ab0522",
          "body": "…olds, and new providers",
          "is_bot": false,
          "headline": "docs: document configuration precedence, caching, distillation thresh…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T12:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3fd8df8644ce8066d540fb564849d99ca500322",
          "body": null,
          "is_bot": false,
          "headline": "fix(dx): improve distillation error feedback and namespace error banner",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T12:31:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "294b7cdcc506e8397123d6cd30c3e152751a76c8",
          "body": null,
          "is_bot": false,
          "headline": "fix(config): reset provider-specific settings on provider change",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T12:27:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2443d508163239a62bd61b93214ab91f105a5450",
          "body": null,
          "is_bot": false,
          "headline": "feat: add first-class openrouter support and bump version to 0.5.12",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T12:12:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fec6964afaa4b36378cc972cf14207d758a4b0a",
          "body": "…lve conflict in cmd/kill_windows.go",
          "is_bot": false,
          "headline": "Merge branch 'origin/claude/review-cli-cross-platform-aKTjr' and reso…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T11:56:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78d76dd0107225dec5c7d41687ab26627fb36e10",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to v0.5.11",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T11:43:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9adabd3349c91de1a0231818c37f5de2f9030efe",
          "body": "…, cross-project memory scoping, and interactive configuration safety",
          "is_bot": false,
          "headline": "Implement native Go distillation, silent unconfigured search handling…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T11:43:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91dad5972968622aee985bf283afd4f88f7cbb91",
          "body": "…n checks",
          "is_bot": false,
          "headline": "feat(config): unify checkProviderModelCompat and add gemini validatio…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T11:29:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c26ac3f103f9f5f2347677157411835bc4ca3292",
          "body": "…ations",
          "is_bot": false,
          "headline": "fix(claude): remove duplicate forgememo hooks and mcp server configur…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T11:18:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efa41f2cd31b4b41ba489ad7b393364f1c63ec52",
          "body": "…, and suppress redundant fallsbacks on tool calls",
          "is_bot": false,
          "headline": "fix(hook): resolve context7 duplication, wrap context in XML envelope…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T11:11:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a7095f452575be24f5ac0a65341a79012a71e4f",
          "body": null,
          "is_bot": false,
          "headline": "remove claude compact-check hook and bump version to 0.5.9",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-07-01T01:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e62b3fe9152e78abb6abce45f6a9b7a6b7477e63",
          "body": "… to resolve CI hangs, and implement lazy memory",
          "is_bot": false,
          "headline": "fix: enforce Next.js in-handler auth, optimize Windows process checks…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-25T18:26:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d91699e8858598828fb27101f3b648b8da310c21",
          "body": "…eritHandles\n\nWhen go test spawns a test binary, the binary's stdout/stderr are connected\nto a pipe managed by the go test tool. Any process the test binary spawns\n(forge start → daemon) inherits the write end of that pipe. The daemon then\noutlives the test binary and keeps the pipe open, causing th\n[…]\nderr (the\nlog file) via STARTUPINFO, so daemon logging is unaffected.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LXNNoGQfipgTftYkhBXA1F",
          "is_bot": false,
          "headline": "fix: prevent daemon from inheriting pipe handles on Windows via NoInh…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-25T05:40:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4f9a02ecb291481c50455d8c594d63788f332a4c",
          "body": "1. Add permissions: contents: read to test-windows job for\n   least-privilege token scope (was falling back to repo defaults).\n\n2. In killProcess, re-validate PID identity before the proc.Kill()\n   fallback (taskkill may fail after the daemon exits and the PID is\n   reused), and return an error when\n[…]\nlse timeouts\n   when the PID is reused immediately after daemon exit.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LXNNoGQfipgTftYkhBXA1F",
          "is_bot": false,
          "headline": "fix: address CodeRabbit review — permissions and PID reuse safety",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-25T04:42:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b45b94c68f148af38d25a8abffad5b6ffb737cf0",
          "body": "PowerShell's Tee-Object creates a pipe for go test stdout. Daemon\ngrandchildren spawned by integration tests (via `forge start`) inherit\nthe write end of this pipe through the process tree. When go test times\nout and exits, those daemons still hold the pipe open, blocking\nPowerShell's pipeline indef\n[…]\nting. Write-Host echoes the output so CI\nlogs retain full visibility.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LXNNoGQfipgTftYkhBXA1F",
          "is_bot": false,
          "headline": "fix: avoid pipe inheritance hang in test-windows CI step",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-25T04:38:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a451087448030ed749f1ecc33e3b8e017fc480d2",
          "body": "1. Add waitOrTimeout() helper with 5s bound to prevent test cleanup from\n   hanging if killProcessTree fails to terminate the daemon process.\n\n2. Move t.Cleanup(stop) before waitForFile in TestBinary_DoubleStart and\n   TestBinary_RestartCycle so cleanup is registered even if readiness\n   wait fails \n[…]\nn unrelated\n   process tree if the PID was reused after a daemon crash.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01AwW6bjGowKjpnf3qBSduxY",
          "is_bot": false,
          "headline": "fix: address CodeRabbit review feedback on Windows CI fix",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-25T03:23:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3ff83b9dcf8ce6b4938169489a0ac41b578f189a",
          "body": "…ocesses\n\nThree root causes fixed:\n\n1. kill_windows.go: Use `taskkill /T /F /PID` to kill the entire process\n   tree instead of os.Process.Kill() which only kills the direct process,\n   leaving daemon grandchildren orphaned on Windows.\n\n2. integration_test.go: Add killProcessTree() helper for test c\n[…]\n  test failure. Real failures always have a tab-separated package name.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01AwW6bjGowKjpnf3qBSduxY",
          "is_bot": false,
          "headline": "fix: resolve Windows CI test-windows failures from orphaned daemon pr…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-06-25T02:50:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ae3ccf03a415e94ffca7e03b5b92d051601a76f7",
          "body": null,
          "is_bot": false,
          "headline": "feat: P1-P3 relevance improvements, busy-timeout SQLite read-only fixes",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-22T00:27:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b911f6fd7fc794d056c8e9a7d4f1eb1333a0f7a",
          "body": null,
          "is_bot": false,
          "headline": "bump: version to 0.5.7",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T17:20:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bcbb01e4bb819f373200ed4d56b9172e0ec7b88f",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove mastra node_modules from repository and ignore them",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T17:18:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18fa7e720a394d9ed9fb9aeca51ed56b9391e758",
          "body": "…llers",
          "is_bot": false,
          "headline": "feat: self-healing MCP daemon recovery and auto-registration in insta…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T17:17:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "139ef9d36de2817d3aef6f26b1e47164549f09f0",
          "body": null,
          "is_bot": false,
          "headline": "docs: update README to map codebase architecture in ASCII",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:43:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d54998c4e2f4a3e7e3c0af216b9fb1b9665cae35",
          "body": null,
          "is_bot": false,
          "headline": "bump: version to 0.5.6",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:38:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d187685400fb38be60ce2daaf650731bfd5229f",
          "body": "… compatibility",
          "is_bot": false,
          "headline": "fix: check HOME env var in pollAntigravityTranscript for Windows test…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:31:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2012379681fe6d37ea984199d02dcc13f285bfd",
          "body": "…lity",
          "is_bot": false,
          "headline": "fix: check HOME env var in callAntigravity for Windows test compatibi…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d767f800339f002de01a693bc8f78933daf8762b",
          "body": null,
          "is_bot": false,
          "headline": "fix: resolve Windows CI failures in tests and daemon startup",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:23:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1e78ec557dc07e4dc45e867150be11aa4370d40",
          "body": null,
          "is_bot": false,
          "headline": "docs: add repomix packing details to CLAUDE.md",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:06:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "885883554ed24283c7567fefe7da8afaa47fc995",
          "body": "…d bump version to 0.5.5",
          "is_bot": false,
          "headline": "feat: integrate antigravity provider, stabilize environment hooks, an…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-20T16:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d09154f3fb76e63c1770ea1894674e0e7c450d4f",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.5.4",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-17T17:51:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "931af2ad7aac54927fb66a83fe088c7a7fcd63b3",
          "body": null,
          "is_bot": false,
          "headline": "ci: increase Windows unit tests timeout to 240s",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-17T15:47:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5af40226804b4be516a4835b8c1895a2c413418",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove json tags from unexported fields to fix go vet warning",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-17T15:41:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af3ace3d75dad1debf426c09fab2be555756a0d4",
          "body": "… reloading, and parameter validation limits",
          "is_bot": false,
          "headline": "Implement reconfigure_provider MCP tool, daemon dynamic configuration…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-06-17T15:37:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f119f387dbce08520a5b200aea6fb636fb69b82",
          "body": null,
          "is_bot": false,
          "headline": "feat: add NVIDIA as first-class provider and bump version to 0.5.3",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-29T18:11:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29a774ebf2a258613da8c8902a619487f6991733",
          "body": null,
          "is_bot": false,
          "headline": "bump VERSION to 0.5.2",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-21T19:29:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98a71efc6ba84d0f995c945becd00ff2fb247c92",
          "body": "… (v0.5.2)\n\n- Fix daemon endless loop: check for completed sessions directly instead\n  of raw event count (avoids spinning on orphaned unknown-session events)\n- Fix large session data loss: progressive chunking for sessions >100\n  events. Chunks of 50 are synthesized individually, then a master\n  sy\n[…]\nmetrics are\n  visible during troubleshooting\n- Export SummarizeEventPayload, ShortTS, CallLLM, ParsePrinciples from\n  distill package for use by the agent\n- Remove stale distillEventThreshold constant",
          "is_bot": false,
          "headline": "fix: daemon endless loop, large session data loss, subprocess logging…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-21T19:24:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b72190e4bc3dd6a6de156c75b7ca8935b1b6a17e",
          "body": "…ools",
          "is_bot": false,
          "headline": "docs: update README with distill agent, cross-session patterns, MCP t…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-21T18:43:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9465d282aad1f451fab7d9783ce9b4746888939f",
          "body": "- Add Go MCP client (internal/mcp/client.go) — spawns forge mcp as\n  subprocess, communicates via JSON-RPC 2.0 over stdio\n- Add distill-agent command — replaces direct function calls in daemon\n  with a subprocess that gathers context via forge MCP tools before\n  synthesizing sessions\n- Add SetSessio\n[…]\ndy knows\n- Wire into daemon loop — daemon spawns forge distill-agent per session\n  instead of calling SynthesizeCheckpoint directly\n- Daemon now tracks pass/fail only; the agent records its own health",
          "is_bot": false,
          "headline": "feat: distill-agent with context-aware synthesis via MCP (v0.5.1)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-21T18:12:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a5b063aaf728cdebd5e783cc99d8a576cb55497",
          "body": "…(v0.5.0)\n\n- Replace noisy batch distill with session-aware distillation:\n  daemon now identifies completed sessions (Stop/SessionEnd events)\n  without checkpoints and synthesizes them individually, preserving\n  narrative context instead of grabbing 300 random events.\n- Mark events distilled after c\n[…]\nng in recall.\n- Add get_cross_session_patterns MCP tool and forge status display.\n- Add provider-model compatibility validation on forge config.\n- Bump to v0.5.0 (significant architectural evolution).",
          "is_bot": false,
          "headline": "feat: session-aware memory architecture with cross-session synthesis …",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-18T21:02:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "923b523ad34336dd5f3b249bfffb00a55990439d",
          "body": "…in tool payloads\n\n- extractStrings now scopes to tool_response only, skipping tool_input fields\n  (old_string, new_string, content) that carry file content being edited\n- extractCommandFamily reads command family directly from tool_input.command,\n  preserving accurate alert titles without scanning \n[…]\n\n\nFixes: forge noise where editing files containing \"error\" parameter names\ntriggered repeated_failure alerts with tool_error classification.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: prevent false-positive repeated_failure alerts from source code …",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-12T15:32:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2647205c5c124cea36ed4c4edf37f56cf3fdfb0e",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: suppress forge hook stderr to eliminate UI noise; bump to v0.4.41",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-12T15:19:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "518c1726a1f26ee1a17d4116b818178d7cfb8c15",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump version to 0.4.40",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-07T19:52:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a839b27211940ba6c5ac745114ae265cdd8b3748",
          "body": "…dabot alerts\n\npayment/go.mod listed chi v5.2.1, golang.org/x/crypto v0.37.0, stripe-go/v81\nv81.35.0 (non-existent version), and godotenv as requirements, but none are\nimported by the module's code. go mod tidy removes them all. This resolves the\n3 moderate Dependabot security alerts (GHSA for chi host-header injection and\ntwo golang.org/x/crypto vulns) since the packages are no longer in the\ndependency graph.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: remove phantom dependencies from payment module to resolve Depen…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-07T19:39:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a0c7175a0247b901c71a60970dc9d41680a1a90b",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump version to 0.4.39",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-07T19:26:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6b5a6648076f7f93bf19196979461d5cd6bfaabb",
          "body": "Three test files filling integration-level gaps that existing v0.4.38\nunit tests did not cover:\n\n- internal/distill/distill_baseurl_e2e_test.go: assert via httptest that\n  the actual HTTP request lands on /v1/chat/completions exactly,\n  regardless of whether --base-url ends in /v1, /, /v1/, or /v1//\n[…]\nthe network entirely.\n- cmd/version_sanity_test.go: catches \"tag pushed but VERSION not\n  bumped\" — only runs when HEAD is on an annotated tag.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add regression tests for v0.4.38 fixes",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-07T19:20:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a13735eda72fc26a841f64e2e7af0b98006f196e",
          "body": "…MCP noise; add validate/backoff/checksum\n\nOpenCode integration round, addressing 7 user-reported issues:\n\n1. Plugin no longer requires `$` shell helper (use child_process.spawn).\n2. forge config warns about env-vs-config drift at save time.\n3. --base-url no longer double-appends /v1 (normalizeOpenA\n[…]\n credentials by default; --no-validate opts out.\n6. Distillation backoff: 1m→2m→4m→8m→16m→30m on consecutive failures.\n7. Stale-hook detection uses realpath + SHA256 (no churn on equivalent binaries).",
          "is_bot": false,
          "headline": "v0.4.38: OpenCode compatibility — fix plugin shell helper, base URL, …",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-05-07T18:49:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a7fa65a1e1244884ac960d35ed7830a79dce72d",
          "body": "…vent DB pollution",
          "is_bot": false,
          "headline": "v0.4.37: filter Docker/CI build noise from forge event capture to pre…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T20:23:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acd461b2ee5935b173642156b6ecebc40cb0a43e",
          "body": "…dboxed agents)",
          "is_bot": false,
          "headline": "v0.4.36: disable SessionStart inject-check hooks (noisy on remote/san…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T19:02:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9fba7484b01b6ec9c04de7412b956ca96edb5db",
          "body": "…e principle injection",
          "is_bot": false,
          "headline": "v0.4.35: Dockerfile fixes, refactored modular cmd/ commands, proactiv…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T18:51:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02d909910dff70f6f99fc772f5318d817752aeaa",
          "body": null,
          "is_bot": false,
          "headline": "Fix Dockerfile: run go mod tidy before build to generate go.sum",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T18:31:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6453036cd404b65046b252e94d840a3df20cd761",
          "body": null,
          "is_bot": false,
          "headline": "Restore payment server source and fix Dockerfile to build from source",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T18:28:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d063c478b24a19643a0f6f00be71d60198c2aa75",
          "body": null,
          "is_bot": false,
          "headline": "Fix Dockerfile: use pre-compiled binary instead of building",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T18:25:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed5efdb4344fc9f71bea42673fe25f767d5628ce",
          "body": null,
          "is_bot": false,
          "headline": "Fix Dockerfile: remove cd payment (rootDir already set to payment)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T18:22:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "642bd728f30c7282980aa29651080997109df182",
          "body": null,
          "is_bot": false,
          "headline": "Add Dockerfile for payment server",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T17:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acf785a3d6a0aa1a512e6ab1decf14c3e674ebce",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to 0.4.34",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T17:36:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ee60dcdab7a2508451cb1bf9179e82b4cb99ce3",
          "body": null,
          "is_bot": false,
          "headline": "Refactor: split cli.go into modular command files",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T17:35:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "596f434de0f014c237c0b3f85404753a5be44d5d",
          "body": "…e/Gemini/Codex/OpenCode, inject_principles MCP tool, auto-inject on session start",
          "is_bot": false,
          "headline": "v0.4.33: proactive principle injection — SessionStart hooks for Claud…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T16:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed7c827881de08da251d439817ac13f2b4f6e7b3",
          "body": "… add nvm to managed paths",
          "is_bot": false,
          "headline": "fix: doctor --repair restarts daemon, re-queue empty distill batches,…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-29T15:39:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e35f346a2a6c3fc1693ec4fcc590044e801e098",
          "body": null,
          "is_bot": false,
          "headline": "Fix Claude hook recall output",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-28T22:58:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f8b971dc5bf04c34d38e8db0bafb252382f42d1",
          "body": "Adds `forge compact-check` subcommand called by a new asyncRewake\nPostToolUse hook in Claude Code. After every tool use, the hook counts\nsession events in the Forgememo DB and exits with code 2 at every 30th\nevent, waking the Claude Code model and injecting a rewakeMessage that\ninstructs it to run /\n[…]\nn.go: dispatch compact-check to runCompactCheck\n- cmd/compact_check_test.go: 5 tests covering 0/29/30/isolation cases\n- Bump version to 0.4.29\n\nCo-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add auto-compact at 30 tool uses via asyncRewake hook",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-18T20:47:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e9367b1624b5b4505bca1ad47d1a9422414e00e3",
          "body": "Principles now carry an explicit outcome (success/failure/unknown) and\na lean implementation hint (≤120 chars) extracted by the distillation\nLLM. Injection format switches from verbose narrative to a tight\none-liner: \"Past success: title — exact pattern used.\" Stricter\ndistillation prompt rejects va\n[…]\n outcome\nor technique. Recall threshold lowered to 1.5 for impl_hint-bearing\nprinciples to surface concrete past implementations proactively.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add outcome + impl_hint to principles for tighter memory injection",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-11T16:41:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3fe4e5a1438840f99355f4fc375836adecf04813",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to 0.4.27",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-10T01:02:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e29c14bedcdfa442dcbc41493d433a14d188fb89",
          "body": null,
          "is_bot": false,
          "headline": "Switch distillation to checkpoint triggers",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-10T00:59:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63d9fa4bf2dc6b869b096511db3a4a3714e645de",
          "body": "- Add RecentActivePrinciples() DB method (active/NULL status only)\n- Cross-project recall scan now uses RecentActivePrinciples instead\n  of RecentPrinciples (which returns all statuses)\n- Global fallback in loadSessionRecallContext uses\n  RecentPrinciplesByProject(\"\") which already filters via activeOnly()\n- Two new tests prove conflicting principles are excluded from both\n  same-project recall and global fallback injection paths\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Never inject conflicting principles into Claude context",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T14:39:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "04ee5ba445e507d9d81b42523f5c4099275e51b6",
          "body": "Scan same-project principles/summaries first (50/20 cap) and exit\nearly when a high-confidence match is found, skipping the cross-project\nscan entirely. Cross-project scan capped at 100/80 (down from 250/250).\n\nDashboard: project_id now rendered via projectLabel() helper with a\nmonospace style and t\n[…]\ndentified.\n\nAlso: recall now surfaces same-project high-confidence matches, not\nonly cross-project ones — updated test to reflect new intent.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Optimize prompt recall scan; fix dashboard project name display",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T14:19:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "690044f312b33b601db292574c03c9523cc88c08",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump version to 0.4.26",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T07:10:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c491ec35178f40f5835c78a6e5744e358883a333",
          "body": "Windows does not honour 0o600 — os.Stat reports 0666. Guard the\npermission assertion with runtime.GOOS != \"windows\".\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix TestSave_RoundTrip on Windows: skip Unix file permission check",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T07:08:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6658236b6c625a064330eed2787c19d18f2771c2",
          "body": "Coverage gains: db 50→74%, config 24→77%, scanner 21→32%,\ndashboard 60→66%, mcp 59→62%.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add test coverage across cmd, db, mcp, dashboard, scanner packages",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T07:04:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9eb287b6176a06cde30e5bb3a56c05fbb0934144",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump version to 0.4.25",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T06:50:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "baca35beb089c8ed85a871bfc5b96267afd8dde1",
          "body": "…to high confidence\n\n- On first UserPromptSubmit of a session, load previous session summary\n  for the same project (request + learnings + next_steps) and inject it\n  as Forge Context so the agent resumes with full project context.\n- Prompt-matched principle/summary hints now only inject when score \n[…]\nresent in test env).\n- Add test coverage for config.Save, config.SetEnvFromFile, scanner\n  scanGemini dedup, loadHashes/saveHashes roundtrip.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Inject last project session on new session start; gate dynamic hints …",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T06:49:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f317bd1b8b4165fe8a3b0b1185ce230b6794ee9c",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to v0.4.24",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T06:24:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5845122592b474c1480fde82863c1e8522e28d2b",
          "body": "- #23: readonly DB gives clear error + chown fix hint; auto-chmod on open\n- #24b: distill --all no longer exits prematurely when LLM returns 0 principles\n- #24c: PostToolUse payloads now include tool_input/tool_response content (not just 200-char raw JSON)\n- #24d: forge start warns when shell env va\n[…]\nons auto-detect and repair stale hook binary paths after upgrade\n- fix: TestLoadConfigDefaults now clears FORGE_TIMEOUT to be env-independent\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: address issues #24, #23, #21, #13",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-08T06:20:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "42c7569b4375230ab3be07bd9d5628d702020fe5",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to v0.4.23",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-07T16:08:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "99097f57697b66767e8a12fdf4ccf41c13e39641",
          "body": "Fix a TOCTOU race in acquireDistillLock where a goroutine could read an\nempty lock file (PID not yet written) as stale, remove it, and acquire a\nsecond lock — causing concurrent distillation. Fix uses a process-level\nsync.Mutex fast path (TryLock) to reject same-process concurrency before\ntouching t\n[…]\nams per tool\n- New forge agent-guide command outputs copy-pasteable CLAUDE.md block\n- --help gains Agent setup section with 5-step onboarding\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve distill lock race + improve agent-facing docs",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-07T16:04:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b42535f8fc378be8d00d1b10c6f2418bb8c04c12",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to v0.4.22",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T21:36:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3ec023ab4520839ee0035c5b7191825f45d8c418",
          "body": "…rver\n\nWithout a delay, goroutine 1 could complete its entire distillation before\ngoroutine 2 called acquireDistillLock, causing a legitimate second LLM call.\nAdding a 300ms server delay ensures goroutine 1 holds the lock when goroutine 2\ntries to acquire it, making the concurrency guard observable.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: make NoDuplicateDistillation test deterministic with slow LLM se…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T21:23:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "90e6b89632f8acb00dd7e3e3f02cc3eb688cb103",
          "body": "Windows always returns 0666; the 0600 check is only meaningful on POSIX.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: skip file-permission test on Windows (no Unix permission bits)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T21:18:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ac79042bbf31d54d958601d64ed72915f953540a",
          "body": "- repair_test.go: skip plist tests on non-darwin (Linux tried to read\n  systemd unit instead of plist, causing false failures)\n- cli.go: swap defer order in runDistill() so lock.Close() runs before\n  cleanDistillLock() — Windows cannot delete an open file\n- distill_flags_test.go: replace strings.LastIndex(lockPath, \"/\") with\n  filepath.Dir() to handle Windows backslash paths; add filepath import\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve Linux and Windows CI test failures",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T21:13:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ec3f5ecc8253b88655c5c3e9c28ea1342b3b8154",
          "body": "repairServiceIfNeeded() is a no-op on Windows; skip the two tests that\nexpect plist-based repair behavior so Windows CI passes.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: skip plist repair tests on Windows (v0.4.21)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T20:51:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a3a1a506d9775f123a36eb8ba13915baa6cc9fb7",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add missing exa.go required by retrieve worker/planner (v0.4.21)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T20:49:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1a368435f683a48f0afcde826e67983dd17b9d89",
          "body": "Stage db/principles/distill/retrieve/dashboard changes that were already\nlocally modified but omitted from the previous commit, causing CI build\nfailure (InsertPrinciple signature mismatch).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: include in-progress internal changes needed for build (v0.4.21)",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T20:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "50ac7733f5bbc1bf6d8553bfa90e81c9149fdf6c",
          "body": "…v0.4.21)\n\n- Auto-repair launchd/systemd plist path on forge start when binary moves\n- Atomic forge.addr write via temp-file rename (prevents partial reads)\n- forge distill --all drains full backlog; --wait queues behind running distill\n- Detect duplicate forge binaries in PATH at init and doctor; r\n[…]\n installs\n- Version-aware npm setup: skip same version, abort on downgrade, warn on PATH conflicts\n- 40+ new tests covering all new behaviour\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: daemon reliability, duplicate binary detection, distill drain (…",
          "author_name": "jimkali",
          "author_login": "KalinovJim",
          "committed_at": "2026-04-06T20:45:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 75,
      "commits_last_year": 177,
      "latest_release_at": "2026-07-18T15:01:46Z",
      "latest_release_tag": "v0.7.2",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 14,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 1.9
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 14,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "forgememo-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "ai",
            "claude",
            "memory",
            "mcp",
            "cli",
            "agent"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/forgememo-cli",
          "is_deprecated": false,
          "latest_version": "0.7.2",
          "repository_url": "https://github.com/intelogroup/forgememory-cli",
          "versions_count": 60,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3843,
          "first_published_at": "2026-04-03T20:33:12.653000Z",
          "latest_published_at": "2026-07-18T15:01:47.942000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 20
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "mastra/tsconfig.json"
      ],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 60935,
      "source_files_sampled": 125,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2729
    },
    "dependencies": {
      "manifests": [
        "go.mod",
        "mastra/package.json",
        "npm/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "uuid",
            "direct": true,
            "version": "9.0.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-w5hq-g745-h8pq"
            ],
            "fixed_version": "13.0.1",
            "advisory_count": 1,
            "oldest_advisory_days": 92
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-4c8g-83qw-93j6",
              "GHSA-v2hh-gcrm-f6hx"
            ],
            "fixed_version": "4.1.1",
            "advisory_count": 2,
            "oldest_advisory_days": 2
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "3.14.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m",
              "GHSA-h67p-54hq-rp68"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 2,
            "oldest_advisory_days": 38
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "2.2.8",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 4.3,
            "advisory_ids": [
              "GHSA-866g-f22w-33x8"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 66
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "3.0.25",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 4.3,
            "advisory_ids": [
              "GHSA-866g-f22w-33x8"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 66
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "3.0.27",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 4.3,
            "advisory_ids": [
              "GHSA-866g-f22w-33x8"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 66
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-hvrm-45r6-mjfj",
              "GHSA-w62v-xxxg-mg59",
              "GHSA-xgm2-5f3f-mvvc"
            ],
            "fixed_version": "4.12.27",
            "advisory_count": 3,
            "oldest_advisory_days": 2
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.42.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 62
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "unknown": 1,
          "moderate": 5
        },
        "advisory_count": 13,
        "affected_count": 9,
        "assessed_count": 315,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.48.0"
        },
        {
          "name": "@mastra/core",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.41.0"
        },
        {
          "name": "@ai-sdk/openai",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.0"
        },
        {
          "name": "@ai-sdk/anthropic",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.0"
        },
        {
          "name": "ollama-ai-provider",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.0"
        },
        {
          "name": "better-sqlite3",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^11.0.0"
        },
        {
          "name": "zod",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.22.0"
        },
        {
          "name": "uuid",
          "manifest": "mastra/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.0.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": true,
            "version": "v1.48.0",
            "ecosystem": "go"
          },
          {
            "name": "@ai-sdk/anthropic",
            "direct": true,
            "version": "2.0.83",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/openai",
            "direct": true,
            "version": "2.0.108",
            "ecosystem": "npm"
          },
          {
            "name": "@mastra/core",
            "direct": true,
            "version": "1.43.0",
            "ecosystem": "npm"
          },
          {
            "name": "better-sqlite3",
            "direct": true,
            "version": "11.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "ollama-ai-provider",
            "direct": true,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "uuid",
            "direct": true,
            "version": "11.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "uuid",
            "direct": true,
            "version": "9.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "3.25.76",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "github.com/danieljoos/wincred",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/godbus/dbus/v5",
            "direct": false,
            "version": "v5.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zalando/go-keyring",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.42.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.70.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "@a2a-js/sdk",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider",
            "direct": false,
            "version": "3.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "2.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "3.0.25",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "3.0.27",
            "ecosystem": "npm"
          },
          {
            "name": "@ai-sdk/provider-utils",
            "direct": false,
            "version": "4.0.27",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@isaacs/ttlcache",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@lukeed/csprng",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@lukeed/uuid",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@mastra/schema-compat",
            "direct": false,
            "version": "1.2.13",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@posthog/core",
            "direct": false,
            "version": "1.35.1",
            "ecosystem": "npm"
          },
          {
            "name": "@posthog/types",
            "direct": false,
            "version": "1.390.0",
            "ecosystem": "npm"
          },
          {
            "name": "@sec-ant/readable-stream",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "@sindresorhus/merge-streams",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@sindresorhus/slugify",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@sindresorhus/transliterate",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/better-sqlite3",
            "direct": false,
            "version": "7.6.13",
            "ecosystem": "npm"
          },
          {
            "name": "@types/debug",
            "direct": false,
            "version": "4.1.13",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mdast",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/ms",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.19.43",
            "ecosystem": "npm"
          },
          {
            "name": "@types/unist",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/uuid",
            "direct": false,
            "version": "9.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@workflow/serde",
            "direct": false,
            "version": "4.1.0-beta.2",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "1.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "bail",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "base64-js",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "bindings",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "bl",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "buffer",
            "direct": false,
            "version": "5.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ccount",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "character-entities",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "chat",
            "direct": false,
            "version": "4.31.0",
            "ecosystem": "npm"
          },
          {
            "name": "chownr",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "croner",
            "direct": false,
            "version": "10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "decode-named-character-reference",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "decompress-response",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-extend",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "dequal",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "devlop",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "dotenv",
            "direct": false,
            "version": "17.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "end-of-stream",
            "direct": false,
            "version": "1.4.5",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "esprima",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "execa",
            "direct": false,
            "version": "9.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "expand-template",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "extend",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "extend-shallow",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.20.1",
            "ecosystem": "npm"
          },
          {
            "name": "figures",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "file-uri-to-path",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs-constants",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-stream",
            "direct": false,
            "version": "9.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "github-from-package",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "gray-matter",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "human-signals",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "ieee754",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ini",
            "direct": false,
            "version": "1.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-extendable",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-network-error",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-obj",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "jpeg-js",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "3.14.2",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-to-zod",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "kind-of",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "longest-streak",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "markdown-table",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-find-and-replace",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-from-markdown",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-gfm",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-gfm-autolink-literal",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-gfm-footnote",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-gfm-strikethrough",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-gfm-table",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-gfm-task-list-item",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-phrasing",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-to-markdown",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-to-string",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-core-commonmark",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm-autolink-literal",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm-footnote",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm-strikethrough",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm-table",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm-tagfilter",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-extension-gfm-task-list-item",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-factory-destination",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-factory-label",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-factory-space",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-factory-title",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-factory-whitespace",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-character",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-chunked",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-classify-character",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-combine-extensions",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-decode-numeric-character-reference",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-decode-string",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-encode",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-html-tag-name",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-normalize-identifier",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-resolve-all",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-sanitize-uri",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-subtokenize",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-symbol",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-types",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-response",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "minimist",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "mkdirp-classic",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.12",
            "ecosystem": "npm"
          },
          {
            "name": "napi-build-utils",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-abi",
            "direct": false,
            "version": "3.92.0",
            "ecosystem": "npm"
          },
          {
            "name": "npm-run-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-map",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "p-retry",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "parse-ms",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "partial-json",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "posthog-node",
            "direct": false,
            "version": "5.38.0",
            "ecosystem": "npm"
          },
          {
            "name": "prebuild-install",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "pretty-ms",
            "direct": false,
            "version": "9.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pump",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rc",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "3.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "remark-gfm",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "remark-parse",
            "direct": false,
            "version": "11.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "remark-stringify",
            "direct": false,
            "version": "11.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "remend",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "section-matter",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "secure-json-parse",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "simple-concat",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "simple-get",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "sprintf-js",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "string_decoder",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-bom-string",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-final-newline",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tar-fs",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "tar-stream",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tokenx",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "trough",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.22.4",
            "ecosystem": "npm"
          },
          {
            "name": "tunnel-agent",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "unicorn-magic",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "unified",
            "direct": false,
            "version": "11.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-is",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-stringify-position",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-visit",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-visit-parents",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "util-deprecate",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vfile",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "vfile-message",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "xxhash-wasm",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yoctocolors",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "zod-from-json-schema",
            "direct": false,
            "version": "0.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "zod-from-json-schema",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          },
          {
            "name": "zwitch",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 315,
        "direct_count": 11,
        "indirect_count": 304
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 8,
        "open_issues": 19,
        "closed_ratio": 0.321,
        "closed_issues": 9,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "KalinovJim",
          "commits": 165,
          "avatar_url": "https://avatars.githubusercontent.com/u/189157289?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        },
        {
          "type": "User",
          "login": "intelogroup",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/64654010?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.932
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "11 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "efd3d2f5eba6feb7c2df9624b8206e465bb3c81a",
        "ran_at": "2026-07-23T22:47:41Z",
        "aggregate_score": 2.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T22:12:49Z",
      "oldest_open_prs": [
        {
          "number": 27,
          "created_at": "2026-06-20T17:18:41Z",
          "last_comment_at": "2026-06-20T17:19:00Z",
          "last_comment_author": "socket-security"
        }
      ],
      "last_merged_pr_at": "2026-07-01T21:09:29Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 6,
          "created_at": "2026-04-03T15:11:42Z",
          "last_comment_at": "2026-04-03T16:14:01Z",
          "last_comment_author": "intelogroup"
        },
        {
          "number": 7,
          "created_at": "2026-04-03T16:12:49Z",
          "last_comment_at": "2026-04-03T16:13:44Z",
          "last_comment_author": "intelogroup"
        },
        {
          "number": 8,
          "created_at": "2026-04-03T16:44:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 9,
          "created_at": "2026-04-03T16:46:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 12,
          "created_at": "2026-04-03T17:34:03Z",
          "last_comment_at": "2026-04-03T17:35:56Z",
          "last_comment_author": "KalinovJim"
        },
        {
          "number": 13,
          "created_at": "2026-04-03T18:28:26Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 14,
          "created_at": "2026-04-03T20:55:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 16,
          "created_at": "2026-04-03T22:15:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 20,
          "created_at": "2026-04-05T18:39:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 21,
          "created_at": "2026-04-05T18:39:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 22,
          "created_at": "2026-04-05T18:40:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 23,
          "created_at": "2026-04-08T04:06:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 24,
          "created_at": "2026-04-08T05:53:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 25,
          "created_at": "2026-05-14T21:35:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 26,
          "created_at": "2026-05-19T12:07:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 29,
          "created_at": "2026-07-01T11:34:35Z",
          "last_comment_at": "2026-07-01T11:54:58Z",
          "last_comment_author": "intelogroup"
        },
        {
          "number": 31,
          "created_at": "2026-07-01T12:29:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 36,
          "created_at": "2026-07-10T18:03:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 37,
          "created_at": "2026-07-19T17:20:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/intelogroup/forgememory-cli",
    "host": "github.com",
    "name": "forgememory-cli",
    "owner": "intelogroup"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 51,
      "inputs": {
        "security": 36,
        "vitality": 80,
        "community": 24,
        "governance": 50,
        "engineering": 55
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 80,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "commits_last_year": 177,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 14
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "14/52 weeks with commits",
                "points": 9.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 14
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "177 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 177
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 75,
              "latest_release_tag": "v0.7.2",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 1.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "75 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 75
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.9 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "packages": [
                "forgememo-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 3843
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "3,843 downloads/month across npm",
                "points": 47.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 3843,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.932
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 93% of commits",
                "points": 1.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 93
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "merged_prs": 8,
              "open_issues": 19,
              "closed_issues": 9,
              "issue_closed_ratio": 0.321,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "32% of issues closed",
                "points": 15,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 32
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "8/8 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 8,
                      "decided": 8
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "followers": 2,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "intelogroup",
              "public_repos": 40,
              "account_age_days": 2274
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "2 followers of intelogroup",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 2,
                      "login": "intelogroup"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "40 public repos, account ~6 yr old",
                "points": 23.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 40
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "forgememo-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "60 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 60
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 55,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 48,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 36,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 29,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 2.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "11 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 315 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 315
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "source": "osv",
              "advisories": 13,
              "affected_packages": 9,
              "assessed_packages": 315,
              "unassessed_packages": 0,
              "affected_by_severity": "high 3, moderate 5, unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: uuid 9.0.1 (high 7.5)",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "uuid 9.0.1 (high 7.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 92 days ago",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 92
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 315,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "good",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.74,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2729
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "74 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 39.5,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 74,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "mastra/tsconfig.json"
              ],
              "agent_commit_share": 0.33,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "mastra/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "mastra/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "33 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 33,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "good",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "primary_language": "HTML",
              "largest_source_bytes": 60935,
              "source_files_sampled": 125,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "HTML with type-check config (mastra/tsconfig.json)",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "typecheck_config_language",
                    "params": {
                      "files": "mastra/tsconfig.json",
                      "language": "HTML"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/125 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 125,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch go package 'github.com/forge/forge' from its registry",
    "Could not fetch npm package 'forge-mastra' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T22:47:52.370422Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/intelogroup/forgememory-cli.svg",
  "full_name": "intelogroup/forgememory-cli",
  "license_state": "absent",
  "license_spdx": null
}

Verwandte Einträge

Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit intelogroup/forgememory-cli teilen. Nebeneinander lesen →

91pingcap/tidbTiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.Exzellent87n8n-io/n8nFair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.Exzellent87langgenius/difyProduction-ready platform for agentic workflow development.Exzellent89ag2ai/ag2AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3xExzellent93deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Exzellent89aaif-goose/goosean open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLMExzellent

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — npm.