Öffentliches RegisterGefährdet
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.1.0 · 2026-07-25 18:05 UTC
isr4el-silv4 / pi-web-ui
Chrome side-panel UI and local bridge extension for Pi Coding Agent
isr4el-silv4/pi-web-ui erreicht einen Gesundheitsindex von 33 von 100 und liegt damit im Bereich Gefährdet. Am stärksten schneidet es bei Sustainability & Governance (46/100) ab, am schwächsten bei Engineering Quality (30/100). Zuletzt vor 5 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
33
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
33
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 38 wird auf der veröffentlichten Indexskala auf 33 kalibriert (Register-Kalibrierung 2026-08-02).
Eigentümerschaft
Israel SilvaPersönliches Konto
3 Follower6 öffentliche Reposseit Juni 2019
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht | Tags |
|---|---|---|---|---|---|---|
| npm | @isr4el-silv4/pi-web-ui | 1.0.15 | 2.574 | 16 | vor 5 Tagen | pi-packagepi-extensionpipi-coding-agentchromevivaldiedgebravebrowserchromiumaiharnessbrowser-tools |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
36
Entwicklungsaktivität
59Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 5 Tagen |
| 4.8/36 | Commit-Rhythmus — 7/52 Wochen mit Commits |
| 18/18 | Commit-Volumen — 105 Commits im letzten Jahr |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Verwendete Eingangsdaten
| commits_last_year | 105 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 7 |
Release-Disziplin
1Kritisch
Wie die Bewertung erfolgt
| 0/27 | Liefert Releases aus — keine Releases veröffentlicht |
| 0/36 | Release-Aktualität — keine Releases |
| 0/27 | Release-Rhythmus — keine Releases |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
36
Popularität & Verbreitung
17Kritisch
Wie die Bewertung erfolgt
| 16.9/60 | Stars — 12 Stars |
| 0/25 | Forks — 1 Forks |
| 0/15 | Watcher — 0 Watcher |
Verwendete Eingangsdaten
| forks | 1 |
| stars | 12 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
44Schwach
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 16.9/22.5 | Lizenz — Lizenzdatei vorhanden, keine anerkannte Lizenz |
| 0/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| readme_badges | — |
| has_contributing | nein |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| readme_badge_services | — |
| has_pull_request_template | nein |
Wie die Bewertung erfolgt
| 45.5/80 | Downloads pro Monat — 2.574 Downloads/Monat über npm |
| 0/20 | Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen |
Verwendete Eingangsdaten
| packages | @isr4el-silv4/pi-web-ui |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2.574 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
46
Maintainer-Resilienz (Bus-Faktor)
10Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 0/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits |
| 1.4/13.5 | Breite der Beitragenden — 1 Beitragende |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Wie die Bewertung erfolgt
| 14/42 | Issue-Lösungsquote — 33 % der Issues geschlossen |
| 30/30 | PR-Annahme — 1/1 entschiedene PRs gemergt |
| 0/13 | Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 1 |
| open_issues | 2 |
| closed_issues | 1 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0,333 |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.
Eigentümerschaft & Trägerschaft
41Schwach
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 4.3/25 | Reichweite des Inhabers — 3 Follower von isr4el-silv4 |
| 18.2/25 | Kontohistorie — 6 öffentliche Repos, Kontoalter ca. 7 Jahre |
Verwendete Eingangsdaten
| followers | 3 |
| owner_type | User |
| is_verified | — |
| owner_login | isr4el-silv4 |
| public_repos | 6 |
| account_age_days | 2.593 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Paketpflege
100Außergewöhnlich
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf npm |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen |
| 20/20 | Versionshistorie — 16 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | @isr4el-silv4/pi-web-ui |
| ecosystems | npm |
| any_deprecated | nein |
| min_days_since_publish | 5 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
30
Engineering-Praktiken
24Gefährdet
Wie die Bewertung erfolgt
| 0/24 | CI-Workflows |
| 24/24 | Tests vorhanden |
| 0/16 | Linter-Konfiguration |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Verwendete Eingangsdaten
| has_ci | nein |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | nein |
| has_precommit_config | nein |
Dokumentation
40Schwach
Wie die Bewertung erfolgt
| 30/30 | README |
| 0/25 | Dokumentationsverzeichnis |
| 0/15 | Dokumentations-/Homepage-Site |
| 10/10 | Repository-Beschreibung |
| 0/10 | Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | — |
| has_wiki | nein |
| homepage | — |
| has_readme | ja |
| has_docs_dir | nein |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
40
Sicherheitslage
25Gefährdet
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — keine Daten |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Lizenz — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — keine Daten |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — keine Daten |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 2,5 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Die verbleibenden Gewichte wurden renormalisiert.
Abhängigkeits-Advisories
100Außergewöhnlich
Wie die Bewertung erfolgt
| 35/35 | Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory |
| 25/25 | Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory |
| 0/40 | Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum |
Verwendete Eingangsdaten
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 2 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:@isr4el-silv4/pi-web-ui@1.0.15 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 2 Paketen. Erreichbarkeit wird nicht analysiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
46
AI-Agentenkontext & Leitlinien
32Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 32/40 | Lesbare Commit-Historie — 60 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,6 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Wie die Bewertung erfolgt
| 0/18 | Bootstrap mit einem Befehl |
| 22/22 | Automatisierte Tests |
| 0/11 | Lint-/Format-Konfiguration |
| 11/11 | Statische Typprüfung — tsconfig.json |
| 0/10 | Reproduzierbare Umgebung |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100 |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — keine Daten |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | — |
| has_dockerfile | nein |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | nein |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Pinned-Dependencies. Die verbleibenden Gewichte wurden renormalisiert.
AI-Code-Lesbarkeit für Modelle
100Außergewöhnlich
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — TypeScript (statisch typisiert) |
| 55/55 | Handhabbare Dateigrößen — 0/48 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | TypeScript |
| largest_source_bytes | 41.602 |
| source_files_sampled | 48 |
| oversized_source_files | 0 |
Eckdaten
12GitHub-Sterne
1Mitwirkende
105Commits, letzte 12 Monate
5Tage seit letztem Push
0Releases
1Bus-Faktor
2offene Issues
npmPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
OpenSSF Scorecard 2.5 / 10
2.5Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/26 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| k. A. | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| k. A. | Packaging | packaging workflow not detected |
| k. A. | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| k. A. | Signed-Releases | no releases found |
| k. A. | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direkte Abhängigkeiten 2
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| npm | @sinclair/typebox | ^0.34.49 | package.json |
| npm | ws | ^8.21.0 | package.json |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Abhängigkeits-Advisories 0
Die Installation von npm:@isr4el-silv4/pi-web-ui@1.0.15 zieht 2 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 408,
"has_wiki": false,
"homepage": null,
"languages": {
"JavaScript": 1106,
"TypeScript": 219851
},
"pushed_at": "2026-07-19T19:05:15Z",
"created_at": "2026-06-05T21:12:42Z",
"owner_type": "User",
"updated_at": "2026-07-23T06:59:14Z",
"description": "Chrome side-panel UI and local bridge extension for Pi Coding Agent",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Israel Silva",
"type": "User",
"login": "isr4el-silv4",
"company": null,
"location": null,
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4",
"created_at": "2019-06-19T08:50:57Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 2593
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T19:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8324f16dbeccb34e991ae5aa5b62c8823d4f98b7",
"body": "fix(bridge): use host Pi version + version-resilient model API",
"is_bot": false,
"headline": "Merge pull request #3 from isr4el-silv4/bugfix/1-local-models-not-listed",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d5185069f796bfc18fce65e7912e60639d17e31",
"body": "…(#1)\n\nRoot cause: the bridge is a separate spawned process that resolved its OWN\nbundled @earendil-works/pi-coding-agent (0.78.x), which lagged the host\n CLI. Two concrete consequences:\n 1. glm-5.2 was missing — 0.78.x's static model catalog predates it.\n 2. Even when pointed at 0.80.x, the bridge \n[…]\nts: normalizeModelRegistry across both shapes, loadPiSdk honoring\nPI_HOST_PI (+cache), and bridge-process passing/omitting PI_HOST_PI.\n6 pre-existing version-drift failures unchanged; no new failures.",
"is_bot": false,
"headline": ":bug: fix(bridge): use host Pi version + version-resilient model API …",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:38:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba9ef783529f4e04a97586568d6aa802421fdb13",
"body": "Reverts the bump to ^0.80.10. While 0.80.x ships glm-5.2, it introduced\nan auth-detection regression: modelRegistry.getAvailable() returned only\nthe active model (openrouter/zai catalogs dropped), so the extension\nshowed only one model. Confirmed live: 0.78.1 returns 266+ models, while\n0.80.10 retur\n[…]\n's models.json (built-in provider 'zai' inherits api/baseUrl,\nauth from auth.json), verified to appear alongside all other models.\n\nThe earlier mergeCurrentModel + slash-safe selection commits remain.",
"is_bot": false,
"headline": ":revert: revert(deps): pi-coding-agent back to ^0.78.1 (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T17:03:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed2f231386e87dfd8106b495d4fb60bfa008596c",
"body": "…istered (#1)\n\nThe user's default model zai/glm-5.2 was invisible in the extension\nbecause @earendil-works/pi-ai 0.78.1 does not yet ship glm-5.2 (only\nglm-5 / glm-5.1). With glm-5.2 unregistered, modelRegistry.find() could\nnot resolve the configured default, so findInitialModel silently dropped\nit \n[…]\ned). After the bump glm-5.2 is registered, resolves as the\ndefault, and appears in the model_list broadcast (verified live).\n\nVerified live: currentModel becomes zai/glm-5.2 and RESULT_HAS_GLM52=true.",
"is_bot": false,
"headline": ":arrow_up: fix(deps): bump pi-coding-agent ^0.80.10 so glm-5.2 is reg…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:37:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93a6beae49576be06f24547db25b6c8f11b8f6eb",
"body": "The bridge's broadcastModelList built the model picker list solely from\nmodelRegistry.getAvailable(), which excludes the session's active model\nwhen it is a synthesized fallback. This happens whenever a default model\nid does not exactly match a registered built-in — e.g. the user's\ndefault `zai/glm-\n[…]\n early return when the\n available list is empty but an active model exists\n- Add unit tests for the helper and end-to-end tests asserting the\n model_list broadcast contains the fallback active model",
"is_bot": false,
"headline": "bug fix(bridge): include active model in extension model list (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:14:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "02100f0696191fc4765448096545094fe384b72f",
"body": null,
"is_bot": false,
"headline": "Updated package version and updated ignore files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:46:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "332d59da3d42936e003b9e048d008fa51a7bc203",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c8931763e54de115ea2799df6f28f7af51dded8",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:36:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ff5d22e817c9b2a2f87c54c107e240ac283328",
"body": "- Changed /pi-web-ui start to open the extension's Chrome Web Store\n page instead of http://localhost:<port>/open\n- Updated tests to use the new STORE_URL constant",
"is_bot": false,
"headline": "🔗 open Chrome Web Store page instead of localhost on start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T11:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46b11ac1251dd1cb52362f2cd0a3f5e7b29b6a24",
"body": null,
"is_bot": false,
"headline": "Added .github/ to .npmignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:32:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "432a00640de0c9cfaaeb768cfd6b5cffa263c38c",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:31:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a07d48c25ae7130c69947b98613c644b7cb1f03",
"body": null,
"is_bot": false,
"headline": "Updated README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d4557e378bcd3b6ad8dda3bbf21693b150f1ff4",
"body": null,
"is_bot": false,
"headline": "Create FUNDING.yml",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T15:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b896a82c0fb5256fb2a185326915eb23f1f46b22",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T13:52:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e90728dbdfa0d4169e5714d8021684142484174",
"body": "Model selection is now handled exclusively through the <select> element\nin the chrome extension. The set_model command path and broadcastModelList\non session creation remain intact, so model selection functionality is\nunchanged.",
"is_bot": false,
"headline": "refactor: remove /model slash command from bridge",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T12:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a8942c183928510ddf97b8bad1be73eb24f511d",
"body": null,
"is_bot": false,
"headline": "Allow model selection",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-01T22:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f1c7567f869cbceb96114c9fd8e5b34daf0f4c",
"body": null,
"is_bot": false,
"headline": "Updated version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T19:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd41958a284bc474aca2e10b7aefc7c0c5d97c8",
"body": "- Call resourceLoader.reload() after construction (SDK skips reload\n when a resourceLoader is provided, so extensions/skills/templates\n were never discovered from disk)\n- Access _extensionRunner private field (was extensionRunner without\n underscore, which was always undefined)\n- Add theme.fg/bg/bold/italic/underline/inverse/strikethrough/reset\n methods to WebUiContext (extensions call these during init; missing\n methods caused 'theme.fg is not a function' errors)",
"is_bot": false,
"headline": "fix: discover extension commands, skills, and templates",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdef6b46b391c8d716cb6277ae5f675ad50d8da4",
"body": null,
"is_bot": false,
"headline": "Added handling for bridge-process.ts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c82e071b2d065a00c149a52f693312b740302810",
"body": null,
"is_bot": false,
"headline": "changed bin in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:37:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0edfeec47f7a26f2eebbacee1037a1cf914d50",
"body": null,
"is_bot": false,
"headline": "Updated README and added logs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d94d4becbbc9e85120bfa55b326913072d5142",
"body": null,
"is_bot": false,
"headline": "Changed bridge IP",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:48:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59f9399335acbad6c88525fc9fd364a80b2e24d5",
"body": null,
"is_bot": false,
"headline": "Updated package version",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95a2a14c19471618aeb5a8baaae3aba296ce208",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T20:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24abc5b356a5f80a535fcc900b32fbc5959e608f",
"body": "Not needed for a published library — consumers resolve their own\ndependency tree. Added to .gitignore to prevent future commits.",
"is_bot": false,
"headline": "chore: remove package-lock.json from tracking",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:50:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f00c465a84bc83a03de2dc9ca0c7ff21fe482eb7",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 1.0.3",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a827821be6de15b406bc95f1d882f42a2b44b46",
"body": "The bridge was failing to start when no Chrome/Chromium browser was found,\nbecause chrome.open() threw an error after the bridge was already running.\n\nNow chrome.open() is wrapped in try-catch so the bridge starts regardless.\nUsers can open any browser (Firefox, etc.) manually on the bridge port.\n\nAlso adds tests for the new behavior.",
"is_bot": false,
"headline": "fix: make Chrome open best-effort so bridge starts even without Chrome",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbb6c134d06c5d7717f1429c737e4f3c42aedc37",
"body": "…very, completions\n\nBridge-side implementation for Pi extension commands on Chrome:\n\n- WebUiContext: full ExtensionUIContext implementation via WebSocket\n - confirm/select/input with 30s timeout and default responses\n - notify as fire-and-forget broadcast\n - All TUI-only methods as no-ops\n - cle\n[…]\n command_completions event with items\n- Protocol types: list_resources, get_completions, resources_list,\n command_completions, extension_command_error\n- 131 tests passing, TypeScript compiles cleanly",
"is_bot": false,
"headline": "feat: bridge-side extension commands — bindExtensions, resource disco…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-23T21:26:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbb44258e973d6802b2cae24d5094802d8a90fa8",
"body": null,
"is_bot": false,
"headline": "1.0.2",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f68b7e220643c7b89262cad24ff4fc5c1cebc85",
"body": null,
"is_bot": false,
"headline": "updated image in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4df2d3f368d40982cb7d0f883a8e94e291eaaf21",
"body": null,
"is_bot": false,
"headline": "1.0.1",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e4f6e606a29069fa7fab76581e93129b3ce363",
"body": null,
"is_bot": false,
"headline": "Add license field to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa4644b02061fc5d9fd7bd179ba02003996ca19d",
"body": null,
"is_bot": false,
"headline": "Fix npm badge URL and add repository field",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b42b2f8267bd8c4e2da15cda6f33d012f8d1ec3",
"body": null,
"is_bot": false,
"headline": "updated package name",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09a33ca42f04ea495df2b33785386234e8fa269c",
"body": null,
"is_bot": false,
"headline": "Added Pi tag to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d974bd61cd8be5e5f2ccc5bb0159c208426bba93",
"body": null,
"is_bot": false,
"headline": "Replace header logos with pi-web-ui screenshot",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7863b32f00c5d6bb7069e3cd7ab2f091aabe9685",
"body": null,
"is_bot": false,
"headline": "added keywords",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8929cee54481ae9d97a2f90b58da3dddd2834538",
"body": null,
"is_bot": false,
"headline": "set version to 1.0.0",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0b53cc0b16ba865365866dd09b785f9e087172",
"body": null,
"is_bot": false,
"headline": "Removed divider from README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a9258d4214a563025a46d4fd701c11d015d667",
"body": null,
"is_bot": false,
"headline": "docs: center logos",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13afc2eabd85513eb11ac67d4ccd04b6fe9e3eae",
"body": null,
"is_bot": false,
"headline": "docs: move logos to top and equalize sizes at 64px",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1cc18b777fed0c032dbfdaec76d4bae7dee71e",
"body": null,
"is_bot": false,
"headline": "docs: constrain logo sizes in README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab6dacbbfd9fba92d01b54a87c7fa07f101d88b",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logo assets",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6c46fc8d6923e5bdf378fb399e314ad83c7bbb",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logos to README header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917f8636c187c2c34fc1c2b4eda77cf914b68d34",
"body": "- Rewrite README with philosophy, architecture, setup, usage examples,\n browser tools, frontend workflows, session management, and permissions\n- Add emojis to section titles for readability\n- Create LICENSE file (Apache 2.0)\n- Set package.json private to false for npm publishing",
"is_bot": false,
"headline": "docs: comprehensive README, Apache 2.0 license, set package public",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0bf508281e2565a566f19250de21a4d8ff106a2",
"body": null,
"is_bot": false,
"headline": "moved chrome-extension to specific repo",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0cd537bbcbad5bc9139addc74230fd55cfb539",
"body": "- Scroll target now points to main (the actual scrollable container)\n instead of #messages (a no-op since main has overflow-y: auto)\n- Added bottom padding to main and margin-bottom to last message\n for breathing room between conversation and textarea",
"is_bot": false,
"headline": "Fix spacing between last message and prompt input",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac40464fa853b8bf049e9805676d0d33aa6fa6a",
"body": "…ing old one\n\nOn WebSocket connect, send new_session with cwd from /status instead of\ndispatching session_state which restored the previous session. This ensures\na fresh session starts immediately when the extension is refreshed.",
"is_bot": false,
"headline": "fix(chrome-extension): start new session on refresh instead of restor…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea229d9acf89a0f2b6c3d4306e2cb98e92c3d47",
"body": "Relocate UI request dialogs from main content area into the header,\npositioned between the attached tabs list and the CWD/resume row.\nRestyled with yellow warning colors for clear action-required visibility.",
"is_bot": false,
"headline": "Move confirmation banners to header above CWD row",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:14:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd75629e4262d4bc94047db07d98f90ec085cac4",
"body": null,
"is_bot": false,
"headline": "clean up: remove stray IDE/plan files from tracking, update gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:19:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fd04ecd84b6ef07254bc4a3f61339a7ffc9b6a6",
"body": "- Switch form to column layout so send/abort button stays visible\n- Enable overflow-y: auto on textarea so long text is scrollable\n- Add thin custom scrollbar for the textarea",
"is_bot": false,
"headline": "fix prompt form layout and textarea scrolling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:17:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6946e9d9f270cca030a195499ea6b85f41b07730",
"body": null,
"is_bot": false,
"headline": "restore original .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "323a922a4cc7a41f0dc9b4662c66581389640dae",
"body": null,
"is_bot": false,
"headline": "preserve README.md in gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9084ff404d93ca445d8df1296dc5390333fc584d",
"body": null,
"is_bot": false,
"headline": "unstage IDE and plan files, add to gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e93b1b00ad22f3ef2e456efa8d4370931ff7810f",
"body": "- Changed <input> to <textarea> for multi-line support\n- Auto-resizes vertically (max 180px) as user types\n- Enter sends message, Shift+Enter adds newline\n- Resets height after sending",
"is_bot": false,
"headline": "replace prompt input with auto-growing textarea",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b30a64ef34deaa29bf188551ff5756f2a655fcf",
"body": null,
"is_bot": false,
"headline": "add Pi badge as extension icons (16, 32, 48, 128px)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6137512382973f573cb5a875baaec1ee4836bca5",
"body": "- Complete CSS rewrite with CSS custom properties for theming\n- Light mode: warm stone palette, blue accent\n- Dark mode: deep zinc palette, blue accent\n- User messages as blue bubbles flush-right\n- Assistant messages as bordered cards with rich markdown\n- Catppuccin Mocha code blocks for developer-n\n[…]\n) in header\n- Persists preference to localStorage\n- Respects OS prefers-color-scheme as default\n- Green dot status indicator for bridge online/offline\n- Custom thin scrollbar, smooth theme transitions",
"is_bot": false,
"headline": "redesign sidepanel with light/dark mode",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:00:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc8d0455fede9c44a243d010ba6a383f891fd075",
"body": "- Move pi-badge.svg into chrome-extension/ directory\n- Display 20px badge next to \"Pi Web UI\" title in header\n- Style with rounded corners and proper alignment",
"is_bot": false,
"headline": "Add Pi badge logo to chrome-extension header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "869f8a6ea1a7474b1fb9865f1674af85d3b32b61",
"body": "Switch from hidden attribute to CSS class-based visibility:\n- .error-pill defaults to display: none\n- Only shows when .visible class is present (set only with real error text)\n- Clear textContent on hide to prevent stale content",
"is_bot": false,
"headline": "Fix empty error pill always visible",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "353413ed13ff7a92121a306c0102bb61f8c8b5f1",
"body": "- Clear sessionError on sessions_list and session_history events so\n the error pill hides when sessions load successfully after an error\n- Add defensive trim() check in renderErrorPill to guard against\n empty/whitespace-only error strings\n- Add tests for error pill clear-on-success scenarios",
"is_bot": false,
"headline": "Fix empty error pill showing when no error exists",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480f8c692c2991007b321e165b31b504ef148011",
"body": "Relocate the cwd path/Browse button and Resume/session dropdown from\nthe session section into the header for a cleaner layout matching\nthe design mockup.\n\n- Restructured header HTML with semantic elements\n- Added pill-shaped session select with custom chevron\n- Styled cwd path with monospace font and ellipsis truncation\n- No functional changes — purely aesthetic",
"is_bot": false,
"headline": "Move cwd and session select into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c55a6ae9ddbd03d6f7eec4849880f46ac2c0597",
"body": "The thinking toggle button and block were appended to the DOM via\nappendChild, but then immediately destroyed by 'innerHTML +=' which\nreplaces all children. Replaced with insertAdjacentHTML('beforeend')\nto preserve the thinking elements.\n\nAlso updated the assistant_message ServerEvent type to include the\noptional thinking field that was already being sent at runtime.",
"is_bot": false,
"headline": "fix: thinking emoji not rendered in live chat assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dbc4582212ae7aeba96bcb3646fd6dcfa1c3d28",
"body": null,
"is_bot": false,
"headline": "Added missing files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7db9adbcfa86e31c95f4a845c894b25323b6567",
"body": "…nts in live chat\n\nThe bridge server broadcasts tool_call/tool_result events during live chat\nbut the client reducer ignored them, so only the final assistant_message\nwas rendered. Now the reducer handles all intermediate events to match\nthe session_history display.\n\nAlso includes thinking block extraction in assistant_message broadcast.",
"is_bot": false,
"headline": "fix(chrome-extension): render tool_call, tool_result and thinking eve…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0b0f97c860fb47c1a85176d5c796c904365fb70",
"body": "The model can finish generating before the abort signal reaches the\nprovider, resulting in a normal message_end (stopReason: end_turn)\nthat was incorrectly broadcast to the UI after 'Aborted' appeared.\n\nTrack an 'aborted' flag on the bridge: set on abort command, reset on\nnew prompt/new session. Any message_end arriving while the flag is set\nis suppressed, regardless of stopReason.",
"is_bot": false,
"headline": "fix(abort): suppress all assistant messages after user clicks abort",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b010aae3969eb9a4df247a3a074ef60db53fecf",
"body": "…elay\n\n- Add reconnection logic to bridge-client.js (7 attempts, 2s between each)\n- Emit bridge_reconnect_exhausted event after all retries fail\n- Show reload banner in sidepanel when reconnection is exhausted\n- Suppress duplicate bridge_error notifications during reconnection\n- Clear notifications on successful reconnection\n- Add tests for reconnection, exhaustion, counter reset, and disconnect cleanup",
"is_bot": false,
"headline": "feat(chrome-extension): auto-reconnect bridge up to 7 times with 2s d…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T16:11:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7aa3811b6958e36af6bedf6a73ffd30df8dce54c",
"body": "- Delete src/protocol/permissions.ts (PermissionMode type, isPermissionMode)\n- Remove observe/debug/control mode selector from Chrome extension UI\n- Remove set_permission_mode command from protocol\n- Simplify permission enforcement: all tools allowed by default\n- Cookie/storage toggles and confirmation prompts retained\n- Remove permissionMode from session state, bridge context, and all fixtures\n- Update 16 test files to remove permissionMode references",
"is_bot": false,
"headline": "Remove permission mode selector from UI and simplify bridge permissions",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T15:46:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1fa8848023a5d768021cbebdf0cd0cd864eb8e",
"body": "… chat on new session\n\n- Extract cwd from session file header on resume instead of using bridge context cwd\n- Fix list_sessions returning partial session that overwrote sessionPath in UI state\n- Highlight the currently active session in the dropdown selector\n- Clear chat history when creating a new session via the dropdown\n- Add session_history event with empty messages for new_session\n- Add 4 tests for resume_session cwd behavior",
"is_bot": false,
"headline": "fix: resume_session uses session cwd, highlight active session, clear…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T13:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbee86ef2704fb5558f2c3eb396b38a79fb3501e",
"body": "The Pi SDK's createAgentSession ignores the sessionPath option — it only\naccepts a pre-built sessionManager. When resuming, create a\nSessionManager.open(sessionPath) and pass it so the model loads the full\nconversation history.\n\nAlso removed the async IIFE in resume_session that broadcast a second\nsession_state after the WebSocket already sent one, causing an infinite\nfetchSessionsForCwd → list_sessions → session_state loop.",
"is_bot": false,
"headline": "fix: resume_session loads conversation history into SDK context",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T12:40:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7d844b16ea325b49b17b11871050db0efa9b6d8",
"body": "- Add list_sessions command to protocol with SessionHistoryMessage type\n- Implement bridge handlers for list_sessions and enhanced resume_session\n- Add session dropdown UI next to cwd label with auto-fetch on cwd change\n- Support rich message rendering: tool calls, bash output, compaction, thinking \n[…]\ngistry\n- Extract cwd from session file when resuming for correct directory context\n- Add error pill display for session loading errors\n- Add comprehensive tests for protocol, bridge, client, and state",
"is_bot": false,
"headline": "feat: add session resume with rich conversation history",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T11:42:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac8504fbeb0b1f84af5e19d4be94472b6df28417",
"body": null,
"is_bot": false,
"headline": "docs: save auto-start-session plan to plans/ dir",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac568b2a5c4f004dd3a3f578341c33279749adb",
"body": "The Browse button now immediately sends new_session to the bridge\nafter the user picks a directory, removing the extra \"New session\"\nclick. Shows an error notification if the bridge is offline.\n\n- sidepanel.js: auto-send new_session after directory picker resolves\n- sidepanel.html: remove the \"New session\" button\n- tests: add coverage for new_session command and cwd in session_state",
"is_bot": false,
"headline": "feat: auto-start new session when browsing a directory",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d4534d4587720a267d5f64f5bbda11897bba616",
"body": "The extension showed 'not set' for cwd even when the bridge was running\nwith a valid working directory. Three fixes:\n\n1. Server: send session_state to new WebSocket clients on connect\n2. Client: fetch session state from HTTP /status endpoint on connect\n3. UI: render() now reads state.session.cwd and updates the display",
"is_bot": false,
"headline": "fix: populate cwd in Chrome extension from bridge session state",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2001c1c69455a5aeda5b94d5ff7223babd83efe1",
"body": "- Integrated attached tabs bar into the main header\n- Header now shows title, bridge status, and debugger tabs together\n- Removed fixed positioning, tabs flow naturally in header\n- Cleaned up duplicate CSS rules",
"is_bot": false,
"headline": "refactor: move debugger tabs into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4aed7f71c9b6f3ec5122d795ee0f0c7ef235c31",
"body": "- network.startCapture now sends Network.enable to all attached tabs\n- network.stopCapture now sends Network.disable to all attached tabs\n- console.getLogs now sends Runtime.enable to target tab\n- tabs.getCurrent returns debuggerAttached boolean flag\n- Tool descriptions updated to clarify capture is auto-enabled on attach\n- Agent no longer needs to call startCapture before getNetworkRequests\n- Added 8 new tests for CDP command dispatch and debuggerAttached flag",
"is_bot": false,
"headline": "fix: network/console capture starts immediately on debugger attach",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a757eaa2e22a894fb8b90bd158377e753fd7fc07",
"body": "…ls_conflict events\n\nThe sidepanel had its own chrome.tabs.onActivated listener that fired\nbefore the tool executor's auto-attach could complete, causing false\ndevtools_conflict events on every tab switch.\n\nRemoved the sidepanel's onActivated listener and added onAttachFailed\ncallback to the tool executor so the sidepanel only shows the DevTools\nwarning when auto-attach actually fails on a newly activated tab.",
"is_bot": false,
"headline": "fix: remove duplicate tab activation listener causing spurious devtoo…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b71d1bfeb5efb2cb65d4eafc13835ae082fb2d3",
"body": "debugger.sendCdpCommand, debugger.evaluateScript, and\nnetwork.getResponseBody now auto-attach to the target tab if the\ndebugger is not already attached. Previously, sending a CDP command\nto an unattached tab would cause the chrome.debugger.sendCommand call\nto fail in an unhandled way, leaving the bridge promise hanging\nindefinitely and blocking the Pi agent conversation.\n\nAlso removes duplicate network.getResponseBody case.",
"is_bot": false,
"headline": "fix: auto-attach debugger before CDP commands to prevent hangs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:37:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a5d0feae32db8f6beeea3041b78e6ae3fcc151c",
"body": "…lict UI\n\n- Auto-start network capture on tool executor creation\n- Auto-attach debugger to active tab on startup\n- Auto-reattach debugger when DevTools closes (1s retry interval)\n- Auto-attach on tab activation\n- Fixed header bar showing all tabs with active debuggers (with X to detach)\n- DevTools c\n[…]\nxpose isAttached(), attachedTabIds, networkCapture, detachTab() on executor\n- Add devtoolsConflict and attachedTabs to sidepanel state\n- Update tests for new auto-attach, reattach, and detach behavior",
"is_bot": false,
"headline": "feat: auto-attach debugger, auto-start network capture, DevTools conf…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T19:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3747d6b37a77ffbf46587075fefe385698090cd3",
"body": "- Add global box-sizing: border-box so padding never expands elements\n- Add max-width: 100% to .message and .message.assistant pre\n- Code blocks now scroll internally without pushing the panel wider\n- Text after code blocks wraps correctly at any panel width",
"is_bot": false,
"headline": "fix: constrain code blocks and messages to panel width",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T18:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0ce855b05d6cd2490aa9f4f1af3724387411b46",
"body": "Add overflow-wrap and word-break rules across all message elements,\nheaders, code, tables, links, and notifications so text wraps properly\nin narrow panels instead of overflowing horizontally.",
"is_bot": false,
"headline": "fix: prevent text cutoff when side panel is narrowed",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:51:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a09705984b0826c3ea133ddd68defac4538b133",
"body": "…ering\n\n- Fix 'content is not iterable' error: browser tool execute functions now\n return { content: [{ type: 'text', text: ... }], details: {...} } as\n required by the Pi SDK agent runtime, instead of raw executor results\n- Fix execute parameter signature: now accepts (_toolCallId, params) instea\n[…]\nssages using marked + DOMPurify\n- Style code blocks, tables, lists, headings, links, and blockquotes in CSS\n- Sanitize all rendered HTML to prevent XSS\n- Add tests for both fixes and markdown renderer",
"is_bot": false,
"headline": "fix: wrap browser tool results in Pi SDK format and add markdown rend…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:46:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7dee9626730a86aa4897b1846a16ec2966381668",
"body": "- Fix async getAsEntry() handling in cwd-picker.js (newer Chrome returns Promise)\n- Add server-side CWD fallback: search home dir subdirs and parent of process.cwd()\n- Show warning + editable input in UI when only directory name is available\n- Add tests for async getAsEntry and expanded CWD search",
"is_bot": false,
"headline": "fix: resolve CWD when chrome.fileSystem.getDisplayPath fails",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T15:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79fe9b27396b00e68f03dc8bca932d393deed5a9",
"body": "Root cause: createAgentSession returns { session: { ... } } but the bridge\nwas using the wrapper directly, so sdkSession.prompt was undefined.\n\nChanges:\n- Extract inner session from { session } wrapper in sdk-session.ts\n- Add input validation for non-object messages in bridge-client.js\n- Add try-cat\n[…]\nocket-server.ts\n- Handle 'error' events in sidepanel-state.js reducer\n- Add comprehensive logging throughout the message flow\n- Add tests for session extraction, error handling, and round-trip prompts",
"is_bot": false,
"headline": "fix: extract session from Pi SDK wrapper and add robust error handling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T14:59:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d0c43171389101bad2155bfe3816511db1a3c33",
"body": "The bridge was not creating an SDK session when started via createHttpServer,\nso prompts from the extension had nowhere to go.\n\nChanges:\n- createBridgeApp now creates SDK session automatically when no sdkHost is\n provided, using createDefaultPiSdkAdapter\n- SDK session events (assistant_message, tool_call, tool_result) are\n subscribed to and relayed to connected WebSocket clients\n- Add 4 integration tests for SDK session creation and prompt relay",
"is_bot": false,
"headline": "fix(bridge): create SDK session automatically for prompt forwarding",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T12:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3076b5b8fda65210712b6815f5d669da95629baf",
"body": "The bridge was not actually processing prompts from the extension — it only\nbroadcasted a prompt_received acknowledgement but never forwarded the message\nto Pi's SDK session.\n\nChanges:\n- Bridge now forwards prompt commands to sdkSession.prompt()\n- WebSocket connections are registered in browser clie\n[…]\nribed to and relayed back to connected clients\n- Extension ignores prompt_received echo to avoid duplicating user messages\n- Add 3 integration tests for prompt relay and 2 unit tests for state reducer",
"is_bot": false,
"headline": "fix(bridge): forward prompts to Pi and relay assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:52:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f059eccfb2436cefe4ef43e79b40516eae0e628b",
"body": "The CWD picker was silently failing and always showing 'not set' because\ngetAsEntry() and chrome.fileSystem.getDisplayPath() are deprecated/unreliable.\n\n- Extract path resolution into cwd-picker.js with proper error handling\n- Support both callback-style and promise-style getDisplayPath APIs\n- Fall back to directory name when APIs are unavailable\n- Add 7 unit tests covering all edge cases",
"is_bot": false,
"headline": "fix(chrome-extension): show selected directory path in CWD picker",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30800d12fde85b40dd447e65d94b18921a1f733d",
"body": "- Unref stderr stream after bridge is ready so it doesn't keep\n the event loop alive\n- Chrome opener uses setImmediate instead of waiting for exit\n event (xdg-open may not emit exit reliably)",
"is_bot": false,
"headline": "fix: prevent CLI from hanging after bridge start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2665448f6ca238e2404216df8149c87eb541973d",
"body": "When Pi loads the extension from src/, import.meta.url resolves to\nsrc/bridge-process.js, making the relative path point to\nsrc/bridge/server.js which doesn't exist. Now checks both dist and\nsrc paths, always returning the compiled dist/bridge/server.js.",
"is_bot": false,
"headline": "fix: resolve bridge entry path for both src and dist contexts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2e5379b3c24aca3e208e9dc421f47f8e0e8bcc1",
"body": "- Bridge now responds to POST /stop by closing server and exiting\n- bridge-process stop() checks if running before calling stopFn\n- No-op if bridge is already stopped\n- Added tests for stop behavior",
"is_bot": false,
"headline": "feat: implement bridge stop via POST /stop endpoint",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "858287b5d6bab69d6a8484762ee23fde8e3ad9d1",
"body": "- Pipe bridge stderr instead of ignoring it\n- Include stderr output in timeout error message\n- Helps diagnose why bridge fails to start",
"is_bot": false,
"headline": "fix: capture bridge stderr for better error diagnostics",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964a4f33e16f8d98e209a09b9391416f7f9a0384",
"body": "After spawning the bridge process, poll /status until it responds\nbefore returning from start(). This prevents the browser from\nopening a 'site cannot be reached' page due to the bridge not\nyet listening.\n\n- Added waitForBridgeReady() with configurable timeout/poll interval\n- Defaults: 10s timeout, 200ms poll interval\n- Throws if bridge never becomes ready within timeout\n- Added tests for polling and timeout behavior",
"is_bot": false,
"headline": "fix: wait for bridge to be ready before opening browser",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed1aa5152f451fbfb289ca047cba348ef7abb0e",
"body": "- Wrap child_process.spawn in a Promise to catch async ENOENT errors\n instead of crashing with uncaught exception\n- Try all candidates in order before giving up:\n google-chrome, google-chrome-stable, chromium, chromium-browser,\n vivaldi-stable, vivaldi, xdg-open\n- xdg-open fallback opens the system default browser (e.g. Vivaldi)\n- Clear error message when no browser is found\n- Add 5 new tests for fallback, ENOENT handling, and platform coverage",
"is_bot": false,
"headline": "fix: handle missing Chrome and support more browsers",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4cd16a8f58b54139912beae850eeef7119f932c",
"body": null,
"is_bot": false,
"headline": "Remove pi.extensions from package.json (not needed for auto-discovery)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb166e6404939a2cffefbc110f84b35e1d3a5d3",
"body": "Pi discovers extensions from ~/.pi/agent/extensions/*/index.ts (jiti loads\nTypeScript directly). The entry point was at src/index.ts but Pi expects\nindex.ts at the root of the extension directory.\n\nAlso remove pi.extensions from package.json — that field is for 'pi install'\npackages, not for auto-discovered extensions in the extensions directory.",
"is_bot": false,
"headline": "Add root index.ts for Pi auto-discovery",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a56b3344a3f6e911383ea66b9ec8e592a36876c4",
"body": "…nd browser tools\n\n- Add src/index.ts as the main extension entry point\n- Register /pi-web-ui command with start/stop/status/open subcommands\n- Register 20 browser tools (tabs, HTML, console, network, debugger, cookies/storage)\n- Add session_start/session_shutdown lifecycle hooks\n- Add /browser-tool\n[…]\nUiController\n- Update package.json with pi.extensions field for auto-discovery\n- Add @sinclair/typebox dependency for parameter schemas\n- Add tests for extension command handlers and tool registration",
"is_bot": false,
"headline": "Add Pi auto-discovery extension entry point with /pi-web-ui command a…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:14:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "965275928b28c9d74c2980099b27550d7dbd9058",
"body": null,
"is_bot": false,
"headline": "Complete side panel UI requests and live browser tooling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5edc69d01c89dc4a961e0e3082b807a2d8b2c758",
"body": null,
"is_bot": false,
"headline": "Wire SDK session lifecycle and confirmation policy",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a709cff444a8f5328fef630ac972e39f24079e68",
"body": null,
"is_bot": false,
"headline": "Move tests into submodule test directories",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "407b89b8bea89298b67dc32568bbb2f1b74f9ec1",
"body": null,
"is_bot": false,
"headline": "Wire SDK adapter and browser tool request path",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:38:01Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 105,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@isr4el-silv4/pi-web-ui",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"pi-package",
"pi-extension",
"pi",
"pi-coding-agent",
"chrome",
"vivaldi",
"edge",
"brave",
"browser",
"chromium",
"ai",
"harness",
"browser-tools"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@isr4el-silv4/pi-web-ui",
"is_deprecated": false,
"latest_version": "1.0.15",
"repository_url": "https://github.com/isr4el-silv4/pi-web-ui",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2574,
"first_published_at": "2026-06-17T21:40:18.963000Z",
"latest_published_at": "2026-07-19T19:05:28.541000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 1,
"stars": 12,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-16",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 2,
"malicious_count": 0,
"assessed_package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@sinclair/typebox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.49"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.21.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 2,
"closed_ratio": 0.333,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "isr4el-silv4",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/26 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"ran_at": "2026-07-25T18:05:24Z",
"aggregate_score": 2.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T18:55:51Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 2,
"created_at": "2026-07-12T22:57:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 4,
"created_at": "2026-07-19T20:32:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/isr4el-silv4/pi-web-ui",
"host": "github.com",
"name": "pi-web-ui",
"owner": "isr4el-silv4"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 38 is calibrated to 33 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 38,
"calibrated": 33,
"calibration": "2026-08-02"
}
}
],
"value": 33,
"inputs": {
"security": 40,
"vitality": 36,
"community": 36,
"governance": 46,
"calibration": "2026-08-02",
"engineering": 30,
"ai_readiness": 46,
"weighted_overall_raw": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 36,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 105,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "105 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 105
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 36,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"forks": 1,
"stars": 12,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "12 stars",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 12
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "weak",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2574
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,574 downloads/month across npm",
"points": 45.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2574,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"merged_prs": 1,
"open_issues": 2,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.333,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "33% of issues closed",
"points": 14,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 33
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 30,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "isr4el-silv4",
"public_repos": 6,
"account_age_days": 2593
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of isr4el-silv4",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "isr4el-silv4"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~7 yr old",
"points": 18.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "16 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 16
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 25,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 2.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@isr4el-silv4/pi-web-ui@1.0.15 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"assessed": 2
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 2,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 2,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 46,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/48 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 48,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"metrics_version": "2.1.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:05:30.939469Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/isr4el-silv4/pi-web-ui.svg",
"full_name": "isr4el-silv4/pi-web-ui",
"license_state": "custom",
"license_spdx": null
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.1.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — npm.