JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"kotlin",
"kotlin-multiplatform",
"native",
"orm",
"jvm",
"kmp",
"sql",
"wasm"
],
"is_fork": false,
"size_kb": 4838,
"has_wiki": true,
"homepage": null,
"languages": {
"Shell": 3415,
"Kotlin": 942089,
"Batchfile": 6244
},
"pushed_at": "2026-07-21T12:57:49Z",
"created_at": "2023-11-20T07:43:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-16T20:29:27Z",
"description": " A type-safe, reflection-free Kotlin Multiplatform ORM / SQL DSL for server and client. One schema and query model for PostgreSQL, MySQL and SQLite; runs on JVM, Native, R2DBC, Node, Android, iOS and the browser (Wasm), with transactions and compile-time catalog safety.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Kotlin",
"significant_languages": [
"Kotlin"
]
},
"owner": {
"blog": null,
"name": "Kormium",
"type": "Organization",
"login": "kormium",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/291927593?v=4",
"created_at": "2026-06-08T22:16:39Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 45
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-07-12T16:52:46Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-07-11T09:26:21Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-07-01T09:04:59Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-06-17T10:38:02Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-06-14T14:00:18Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-13T23:45:15Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-06-10T11:44:43Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-06-10T07:22:10Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-09T10:02:34Z"
}
],
"recent_commits": [
{
"oid": "59c5f1140e65d023f2c302a7fe8109ccaa8d89b8",
"body": "0.11.0 — SQLite on the Kotlin/JS target (kormium-sqlite-js)",
"is_bot": false,
"headline": "Merge pull request #128 from kormium/0.11.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-12T16:43:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cf1d3bf353853fbffe915b2be9334e878cbb531",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CHANGELOG: cut 0.11.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-12T16:29:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b933d73763c39ac864e400b626b868b77176859a",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 0.11.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-12T16:27:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "099cbbf818a1e1bef04bfdf7ac477aaa81ee7e4d",
"body": "A Kotlin/JS (IR) sibling of kormium-sqlite-wasm running the same wa-sqlite\nengine, but bound with JS interop so it links against js-only consumers such\nas the kotlin-react wrappers (no wasmJs artifact). Ships only the\nsingle-connection main-thread engine (createSqliteJsDatabase, IndexedDB\npersistence); the Worker/pooled engines stay wasmJs-only.\n\nVerified end-to-end under Node: CRUD, blob round-trip, transaction rollback.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add kormium-sqlite-js: browser SQLite on the Kotlin/JS target",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-12T16:26:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f54e57847c0a350b0d0041b15c9c9082937e42f4",
"body": null,
"is_bot": false,
"headline": "Delete article-brief.md",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-11T14:30:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "173153fe76c3a77395d526e1d7c203279e46d2d0",
"body": "0.10.0: pgvector vector search + raw-SQL gating",
"is_bot": false,
"headline": "Merge pull request #121 from kormium/0.10.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-11T09:19:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80f49b9d3d8752e8baaf3cc09c5279e596ee876a",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CHANGELOG: cut 0.10.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-11T09:19:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "078e1dbfe140a05ef8a2b184c571fbfc4ffa7300",
"body": "Bounded pool checkout: acquireTimeout + PoolExhaustedException (#36)",
"is_bot": false,
"headline": "Merge pull request #127 from kormium/feat/pool-acquire-timeout",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-11T09:03:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e5610ea0b416c26c9ee4b6a9d596cd9804716c0",
"body": "BOM: pin all 20 published artifacts, derived from publishableModules",
"is_bot": false,
"headline": "Merge pull request #126 from kormium/feat/bom-complete",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-11T09:03:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cff1d05b67b8ec0252dab443ab6c3cfaa230562",
"body": "When all poolSize connections are busy, an acquire now waits at most\nacquireTimeout (new createDatabase/createSqliteDatabase parameter, default\n30 s) and fails with the new PoolExhaustedException naming the pool size —\ninstead of blocking forever, which is what the native/Android Channel pools\ndid. \n[…]\nins a per-backend pool-exhaustion section; ABI dumps\n reviewed (additive param + new exception; JdbcDatabase constructor gains\n the Duration).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bounded pool checkout: acquireTimeout + PoolExhaustedException (#36)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-11T08:44:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8b230762325bb1e5b7e67825e0928ac5e484a796",
"body": "…hableModules\n\nTen modules had drifted out of the hand-maintained list (#8): kormium-r2dbc,\nkormium-observe, the three dialect modules, kormium-wasm-driver and the four\nweb/Node engines. The BOM now derives its constraints from the root build's\npublishableModules — the same set that decides what get\n[…]\nstead of a uniform\n\"kormium\", and a description matching what Kormium actually is today instead\nof \"Postgres + SQLite, JVM + Native\".\n\nCloses #8\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "BOM: pin every published artifact by deriving constraints from publis…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:45:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d3ab2a764f8b3dcaaf8218e87bc0018071d3e5f7",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 0.10.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:33:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2ee0d2ad48e1c4973f0756b5522a83bb5d4fecf6",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CHANGELOG: the three browser SQLite engines (PR #125)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:27:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "836079fcedb076572f42a829ce5286ee97a06cd1",
"body": "Browser SQLite: three engines — Worker-hosted default, experimental OPFS pool (stacked on #124)",
"is_bot": false,
"headline": "Merge pull request #125 from kormium/feat/browser-sqlite-engines",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:24:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a988696215bcc81ec345a2648407e9317f71e9",
"body": "Narrow accidentally-public driver internals (stacked on #123)",
"is_bot": false,
"headline": "Merge pull request #124 from kormium/feat/api-narrowing",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:24:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "797252ec4a27d4105749bd7de7e2297a900989b3",
"body": "Lock the public API: explicitApi() + binary-compatibility-validator",
"is_bot": false,
"headline": "Merge pull request #123 from kormium/feat/explicit-api-bcv",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:24:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c4b0d7796318dd5f757edef9e87671e93076189",
"body": "The Phase 4 validation inverted the plan's premise — after the perf fixes, a\n4-query dashboard burst measured ~410 ms on ONE reader vs ~1030 ms on FOUR\n(opfs-wl per-statement lock handoff dominates fast queries), and rapid bursts\ncan fail outright (xLock GetSyncHandleError). The pooled engine ships \n[…]\nne. ADR 0010\nrecords the decision; backends.md gets a per-engine table + guidance section;\nweb-targets.md Phase 4 gets the measurement addendum.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ADR 0010 + docs: three browser SQLite engines, OPFS pool is experimental",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:08:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5bd771d8c70d950b68d17256038c7b11b03a06c6",
"body": "kormium/sqlite-wasm-kt and @kormium/sqlite-wasm-worker are published now, so\nthe composite-build substitution (includeBuild) and the dev-only local npm\nfile: path go away; CI no longer needs a sibling checkout.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Consume published sqlite-wasm-kt 0.1.0 from Maven Central and npm",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:08:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3bf50f74ffda79776b729f6411ac837c55d540cd",
"body": "…orker\n\nThe third browser engine and the recommended default (see ADR 0010): same\nsingle-connection/Mutex model and memory speed as the main-thread wa-sqlite\nengine, but SQLite runs OFF the main thread — measured ~35% faster per query on\nthe 1M-row workload (93–120 ms vs 146–184 ms) and the UI keeps\n[…]\none connection plus the\nblock-scoped Mutex make interleaving impossible.\n\nAlso dumps the module's klib ABI (missed in the pooled-engine commit).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add createWorkerSqliteWasmDatabase: in-memory SQLite in a dedicated W…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:08:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "78ec7e9f8b37ada9ee73a86cfcdcd4a710e482a1",
"body": "- Per-connection PRAGMA cache_size=-32768 + temp_store=MEMORY (SQLite's ~2 MB\n default page cache forced re-reading hot index pages through OPFS every query).\n- Read-only blocks skip BEGIN/COMMIT: the wrap cost two extra postMessage round\n trips per block, each waiting in the main thread's event q\n[…]\n\n- Fail fast after a Worker crash (deadCause) and drop pending entries on\n cancellation (superseded queries during a slider drag used to leak).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Pool: measured fixes from the 1M-row validation",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-10T23:08:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "38f26a5a890da7a74e62b29e961b35894cda4311",
"body": "…the browser\n\nA dedicated writer connection plus a reader pool (each its own Worker), all against the same\nOPFS-backed file via kormium/sqlite-wasm-kt's opfs-wl VFS — genuine multi-connection concurrent\nreads, unlike the existing single-connection, Mutex-guarded SqliteWasmDatabase (which stays the\nd\n[…]\nbrowser: writer commits\nCREATE/DELETE/INSERT, then two reader connections run read-only transactions that measurably\noverlap rather than queue.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add createPooledSqliteWasmDatabase: real concurrent-reader SQLite in …",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-05T13:51:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "73755840302e118eaf0160f85babcfb9a7665da3",
"body": "The audit pass over the BCV dumps: every type/function was checked against\nusage in sibling modules, samples, benchmarks and all documentation; only\nsymbols with zero external references and no presence in any public\nsignature were narrowed. kormium-core needed nothing — its surface is all\ndeliberat\n[…]\npeMapper,\nMySqlJvmTypeMapper, mysqlVendorException for r2dbc; render functions used\nby drivers), DSL structural types, and factory return types.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Narrow accidentally-public driver internals to internal",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T21:24:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "12492e99c21538a08468458a490320b38cf59048",
"body": "… job\n\nNot just kormium-mysql: BCV's inference for host-unsupported targets fails\nfor every Apple-including klib dump on the Linux runner (postgres diffed the\nsame way once mysql stopped masking it: extracted header keeps\n[linuxX64, macosArm64, macosX64, mingwX64], fresh merge lists the two\nLinux-bu\n[…]\nlishing —\nand run the full apiCheck (with brew cinterop headers + konan cache) in the\nCI macOS job. The Linux job keeps the fast JVM-dump check.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "BCV: run klib ABI checks on macOS only; full apiCheck in the CI macOS…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T21:04:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2fb24053333e02117a977a0291b3c7e89d8e83c6",
"body": "BCV's ABI inference for host-unsupported targets breaks in this module's\ndegenerate case: on a Linux host exactly one supported target remains\n(linuxX64 - mingw is deliberately absent), and the extracted golden dump\nkeeps the full [linuxX64, macosArm64, macosX64] target header while the\nfresh merge \n[…]\n check to hosts that build every declared target (macOS) and run it in\nthe CI macOS job; the JVM ABI check for the module still runs everywhere.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "BCV: validate kormium-mysql's klib ABI on macOS only",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T20:40:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "44af3d694a9f3bb3cb7e9add413acacf6b7dd08f",
"body": "… matrix\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "explicitApi: cover the androidMain actual missed by the local compile…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T20:11:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "253ac4fa1d0717bd13de78a472ad43d2c1492cda",
"body": "Every published module now compiles in Kotlin's explicit API strict mode:\n~530 public declarations carry explicit visibility, and the handful of\ninferred public return types are spelled out (one real find: getSqlType\nwas accidentally returning UInt via inference — it stays UInt, now visibly,\nsince l\n[…]\neparate change with reviewable\n.api diffs. CI now runs apiCheck before the test steps; AGENTS.md documents\nthe apiDump workflow for API changes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "explicitApi() across all published modules; apiCheck in CI",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T20:00:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b1610c9f643dbce2a50c1a855e7ea9116324d9e5",
"body": "binary-compatibility-validator 0.18.1 at the root with klib validation on;\nbenchmarks, samples and the BOM are ignored (consumers, not API surfaces).\nThese dumps snapshot the surface BEFORE the explicitApi() cleanup, so the\nnarrowing lands as reviewable .api diffs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "BCV baseline: dump the current public ABI of every published module",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T19:44:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bb7952c4f0a83d53602fe27315b565dfd61bfde9",
"body": "Instant → kotlin.time + decimal out of core onto io.github.kormium:decimal",
"is_bot": false,
"headline": "Merge pull request #122 from kormium/feat/kotlin-time-and-decimal",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T19:29:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "051e1a37c0b2a635ade20824625f97855ea54c13",
"body": "Dropping the 0.6.x-compat force removed transitive format-util from the wasm\nnpm graph; the committed lock predated the bump, so CI's\nkotlinWasmStoreYarnLock failed. (Local validation passed misleadingly: the\nstore task was UP-TO-DATE against pre-branch resolution state in build/wasm —\nregenerated with kotlinWasmNpmInstall --rerun-tasks.)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Regenerate the wasm yarn.lock for the kotlinx-datetime 0.8.0 tree",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T19:13:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "28db4d485755e8afed59656817e5be3bc21da8ec",
"body": "r2dbc-postgresql routes numeric through java.math.BigDecimal and throws on\nthe NaN/+-Infinity values PostgreSQL numeric stores (same defect class as\npgjdbc#1941). NumericAsTextCodec, registered first via codecRegistrar,\nserves typed String requests for oid 1700: text wire format passes through\nverba\n[…]\nting the entity read equals the server's own ::text for every value.\nThe kormium-decimal README caveat about r2dbc reads is replaced by the fix.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "r2dbc: own numeric->text codec so non-finite decimals decode",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T18:43:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2431627cce70bfa05b1a72511e8144eb909088fb",
"body": "…ams, CI + test coverage\n\n- decimalToParam (JVM): NaN/±Infinity bind as Double (float8, assignment-cast\n to numeric by the server) instead of throwing from toJavaBigDecimal();\n round-trip covered in EdgeCaseTest against real Postgres.\n- Postgres r2dbc factory now uses PostgresR2dbcTypeMapper inste\n[…]\nbc-postgresql cannot decode a non-finite numeric (driver codec goes\n through java.math.BigDecimal); limitation documented in the module README.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Address review findings: non-finite decimal binds, typed r2dbc-pg par…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T18:26:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "662adff6d6f05450e69bb7fcb69f8374370f27a4",
"body": "… migrations\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: kotlin.time.Instant, kormium-decimal module, changelog for both…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T13:06:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "33be20bfe62e8dda55c582110706dc14d598ea62",
"body": "kormium-core no longer ships a decimal type: Column.BigDecimal,\nBigDecimalColumnType, ResultSet.getBigDecimal and the DecimalFastPath\nparser are gone, and com.ionspin.kotlin:bignum is removed from every\nmodule. Decimal support now lives in the new kormium-decimal module,\nwhich bridges io.github.korm\n[…]\n.math.BigDecimal (typed numeric bind, no server\nre-inference); everywhere else they travel as decimal text, matching\nthe previous wire behavior.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat!: move decimal out of core into kormium-decimal, drop ionspin",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T13:02:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "333036ce4395bb55cad847ae9d09abb9a0727b5a",
"body": "Column.Instant / InstantColumnType / ResultSet.getInstant now use\nkotlin.time.Instant (stdlib) instead of kotlinx.datetime.Instant, which\nno longer exists in kotlinx-datetime 0.7+. Clock usages move to\nkotlin.time.Clock; JVM toJava/toKotlin Instant conversions come from\nkotlin.time. LocalDate/LocalT\n[…]\nan api dependency of kormium-core since those types are\npart of the public API. Drops the 0.6.x-compat force workaround in the\nwasm-todo sample.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat!: migrate Instant to kotlin.time.Instant (kotlinx-datetime 0.8.0)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-04T10:56:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dd02dfe6ec3d691d809fe7f9f78f7792d889409e",
"body": "The raw-SQL gating (4476f5e) marked Table.execSql @DelicateKormiumApi but\nmissed the four wasmJs test files that create their schemas through it,\nbreaking compileTestKotlinWasmJs for every web engine module in CI.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tests): opt in to DelicateKormiumApi in web-engine integration tests",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-03T18:58:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a3952c312bef98c5b3d8dfa7908409da51ff64a6",
"body": "Add first-class pgvector support in kormium-postgres-dialect, with no core\nchanges — the feature lives entirely in the Postgres dialect layer:\n\n- `Vector` value type (unboxed FloatArray, value equals/hashCode, `[..]` text\n form that doubles as the bound wire value) and `VectorColumnType` with\n opt\n[…]\nension validation).\nDocs: new docs/ai.md (\"Kormium for AI developers\"), and vector sections in\nqueries.md / tables-and-entities.md / AGENTS.md.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(postgres): pgvector vector column type and distance operators",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-03T14:51:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4476f5e754f7f8c1bc30754dad2570687c790df4",
"body": "…KormiumApi\n\nScope/SuspendScope.execute/executeUpdate no longer default params/invalidates\nto empty: the parameterized path was never shorter than string-concatenating a\nvalue into SQL, and a forgotten invalidates silently broke kormium-observe\nnotifications. The redundant execute(sql, params, inval\n[…]\n), giving the raw-SQL escape hatch a\ncompile-time acknowledgment on top of the now-mandatory arguments. ADR 0009\nrecords this and partially supersedes ADR 0006's earlier rejection of an\nopt-in marker.",
"is_bot": false,
"headline": "Require explicit params/invalidates and gate raw SQL behind @Delicate…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-03T13:24:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30d9dc438a47dbe74e5758e8c8bd85b6fa71a7ab",
"body": "The publishableModules allowlist in build.gradle.kts wasn't updated when the\nweb stack (dialect modules, kormium-wasm-driver, kormium-sqlite-wasm, the\nNode engines) merged into 0.9.0, so those modules were built and tested in\nCI but silently skipped by publishToMavenCentral. 0.9.0's coordinates are\nalready live, so this ships as 0.9.1 rather than republishing under the same\nversion.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(release): publish the 0.9.0 web/Node modules to Maven Central",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-03T08:57:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c1776270e1b5104fa775c838ea53838761fc7d98",
"body": "…r/Wasm)\n\nThe landing page understated shipped breadth: it framed the product as JVM +\nKotlin/Native only, dropped MySQL from the platform table, and marked Wasm as\n\"research/planned\". Bring it in line with the real 0.9.0 matrix:\n\n- Intro and \"Multiplatform core\" now say server + client across JVM, \n[…]\n an experimental note for the web targets.\n- Add the wasm-todo (in-browser SQLite) sample and an experimental web-modules\n pointer in Install.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(readme): reflect full 0.9.0 platform matrix (MySQL, Node, browse…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T14:26:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2754f08902b8f24bdb06ebe2e537b15adb409535",
"body": "Release/0.9.0",
"is_bot": false,
"headline": "Merge pull request #88 from kormium/release/0.9.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T08:50:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e45f8b989f4f659652995b695c42ed8d66740686",
"body": "chore(release): finalize CHANGELOG for 0.9.0",
"is_bot": false,
"headline": "Merge pull request #119 from kormium/chore/finalize-0.9.0-changelog",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T08:39:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5783a28c74c294e9ed24baa1b2de46b0040b0339",
"body": "Rename the [Unreleased] section to [0.9.0] so the publish workflow can extract the\nrelease notes for the GitHub Release. No content change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): finalize CHANGELOG for 0.9.0",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T08:27:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4194456a1e083b7bfa1bc44cc04d6f932ebc226c",
"body": "docs: refresh stale roadmap / design / web-targets / compatibility",
"is_bot": false,
"headline": "Merge pull request #117 from kormium/docs/refresh-stale",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T08:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcbf679e448250ee7be9f63c9bba8ecdc6bbef10",
"body": "fix(bench): two missed update(query,entity) call sites (native CI)",
"is_bot": false,
"headline": "Merge pull request #118 from kormium/fix/update-argorder-benchmarks",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T08:09:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "258c2cd3a95ae0b9e73c1b984442b9c0cc4a6741",
"body": "…tity-first\n\nThe #114 arg-order swap (update(query, entity) -> update(entity, query)) missed\ntwo multi-line call sites where `Query(...)` sat on the line *after* `.update(`,\nso the substring `.update(Query(` didn't match: NativeBenchmark (postgres\nnativeTest) and ComparisonBenchmark (JMH). Neither s\n[…]\n#88).\n\nSwap both to entity-first. Verified: :benchmarks:compileJmhKotlin and the\npostgres/sqlite/mysql macosArm64 test source sets all compile.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(bench): migrate two missed update(query, entity) call sites to en…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:57:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b4602a411c83e9d694ba7590ee650814b45d07db",
"body": "Bring the docs back in line with the shipped state after the MySQL engine, the\nweb/Node engines, the kormium-migrate split, and the pre-1.0 consolidation:\n\n- design.md: module table now lists kormium-mysql, the dialect modules, the\n browser/Node engines and kormium-migrate; migrations no longer des\n[…]\nibility.md: MySQL / MariaDB added to the runtime baseline.\n\nDocs-only. api-ergonomics.md, backends.md and api-cookbook.md were already current.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: refresh stale roadmap / design / web-targets / compatibility",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:44:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b3d65a9019d2e20c38b1ffb7384eda31f109517c",
"body": "refactor(core): internalize impl-only expression nodes (surface sweep)",
"is_bot": false,
"headline": "Merge pull request #116 from kormium/feat/api-surface-sweep",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09d787b8be480e3d2ed36db7186dfb152139e744",
"body": "refactor(core)!: insert / upsert return non-null T",
"is_bot": false,
"headline": "Merge pull request #115 from kormium/feat/insert-return-nonnull",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:32:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a90ae9df80032f476ff4cbc5ebde3902423b8d48",
"body": "refactor(core)!: flip update(query, entity) -> update(entity, query)",
"is_bot": false,
"headline": "Merge pull request #114 from kormium/feat/update-arg-order",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:32:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3d84c5a727b20f79ac18e82214ebde86f3f657c",
"body": "docs(agents): fix upsert param name conflict -> onConflict",
"is_bot": false,
"headline": "Merge pull request #113 from kormium/docs/fix-onconflict",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "350aad12980d08a28f2a33b52265d0931cc34aea",
"body": "feat(core): isNull() / isNotNull() on any Operand",
"is_bot": false,
"headline": "Merge pull request #112 from kormium/feat/isnull-on-operand",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-07-01T07:29:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a0fdf7aaa6cd21fa442df6f57bf1989cfc86c8e",
"body": "…ession\n\nRelease-readiness surface sweep. The comparison / logical / computed expression\nnode classes (EqOp, NeqOp, LessOp, LessEqOp, GreaterOp, GreaterEqOp, LikeOp,\nInListOp, BetweenOp, IsNullOp, AndOp, OrOp, NotOp, ParenExpression, ComparisonOp,\nCompoundBooleanOp, ArithmeticOp, LengthOp, StringFun\n[…]\nissing KDoc to the core `Expression` interface and `Value`.\nNo behavior change; core + sqlite green, all module test sources + samples compile.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(core): internalize impl-only expression nodes; document Expr…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T23:45:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "11f5e1c97ac654878763b15ce13d65b13430a658",
"body": "`insert` and `upsert` always yield a row — the passed entity on the fast path, or\nthe written row on returning=true — so returning T? forced a needless `!!` on the\ncommon path. Narrow the return to T. The returning=true path now throws if the\nrow can't be read back (instead of silently returning nul\n[…]\now count (Long). Audit axis 6.\n\nSource-compatible for callers (T is usable where T? was); a now-redundant `!!`\nbecomes a warning, not an error.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(core)!: insert / upsert return a non-null T (was T?)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T23:33:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7d8541f86b176ac9817cf1dc8956814a03b7b4de",
"body": "The Query form of update put the predicate first while the block form puts the\nentity first (`update(entity) { where { … } }`), so the patch entity sat in a\ndifferent position depending on the form. Flip the Query form to entity-first so\nboth read `update(entity, …)`. Audit axis 6 (consistency).\n\nMi\n[…]\nl sites `update(Query(...), patch)` -> `update(patch, Query(...))`\n(done across tests + samples). Sync + suspend + renderSql forms all flipped.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(core)!: flip update(query, entity) -> update(entity, query)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T23:26:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0fb1a295d27615ad95d8a93e231ddc66d8bfef22",
"body": "…flict)\n\nThe Write-section examples used `conflict = listOf(Users.id)`, but the parameter\nis `onConflict` — the snippets as written wouldn't compile. Audit axis 6.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(agents): fix upsert/insertOrIgnore param name (conflict -> onCon…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T23:12:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b012191ceee839ae228d146ca53970f24e55adc4",
"body": "IS [NOT] NULL was only available on a Column, so a computed expression that can\nbe null — a COALESCE of nullable columns, `rank + 1`, a CASE — couldn't be tested\nfor NULL through the DSL (audit axis 4). Widen the `isNull()` / `isNotNull()`\nreceiver from `Column<*,*,*>` to `Operand<*>`, so every oper\n[…]\noad to all operands would re-break the typed-mismatch error message\nfixed earlier); a computed expression uses `.isNull()`. New test covers it.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): isNull() / isNotNull() on any Operand, not just Column",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T23:08:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "12715f9fc80d8ce1e8d1c09b7af481f1ee63430b",
"body": "refactor(core)!: rename predicates less -> lt, lessEq -> ltEq",
"is_bot": false,
"headline": "Merge pull request #111 from kormium/feat/rename-lt",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T23:02:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "803f6e2e4ffa69269beffb74df2caaf763d7d8e0",
"body": "Make the comparison operators symmetric: `lt` / `ltEq` paired with `gt` / `gtEq`,\ninstead of the abbreviated `gt` against the spelled-out `less`. This matches the\ncommon lt/gt convention and what callers (and AI agents) reach for by default,\nremoving a recurring \"unresolved reference 'lt'\" stumble. \n[…]\n declarations (the generic Expression form and the typed Operand form)\nplus the docs — there were no call sites in tests or samples to migrate.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(core)!: rename predicates less -> lt, lessEq -> ltEq",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T22:49:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0881e0eaf0e17075070e53b7660fbf3f6af123a9",
"body": "refactor(core): unify comparison operators onto Operand<Z>",
"is_bot": false,
"headline": "Merge pull request #110 from kormium/feat/operand-algebra",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T22:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f738c1bc55a14712858e90f83f24b0264436b5e5",
"body": "docs(adr): ADR 0008 — no RETURNING on UPDATE/DELETE",
"is_bot": false,
"headline": "Merge pull request #109 from kormium/docs/adr-no-returning-upd-del",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T22:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41bcd9b58b4e51c0223fa9536d9c085780202f4c",
"body": "…returning-upd-del\n\n# Conflicts:\n#\tdocs/adr/README.md",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/release/0.9.0' into docs/adr-no-…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T22:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ebd4dbb1b11fb9f79de05e111108e31318dd1f0",
"body": "feat(core): ConcurrencyConflictException (typed signal, no retry helper)",
"is_bot": false,
"headline": "Merge pull request #108 from kormium/feat/concurrency-conflict-exception",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T22:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0953d77e0dccade3b65b01b5a605fbebca0143da",
"body": "…bstraction\n\nThe typed-literal forms of eq/neq/less/lessEq/gt/gtEq + inList/between/like were\ndeclared separately on Column, NumericExpr, StringExpr, CoalesceOp and CaseOp —\n~30 near-identical overloads, with real coverage gaps (inList only on Column,\nbetween only Column+NumericExpr) and aggregates \n[…]\n+ all samples\ncompile, plus a new test exercising the newly-closed gaps.\n\nNaming (less -> lt) and isNull-on-Operand follow as separate changes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(core): unify comparison operators onto a single Operand<Z> a…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T22:31:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "deba5db7d8e5f5ed51ca6296944591aec626c540",
"body": "…(ADR 0008)\n\nDecline RETURNING on UPDATE/DELETE. MySQL has no RETURNING at all, and the\nINSERT re-select trick doesn't carry over: DELETE rows are gone, and UPDATE\nwould need a select->update->select dance — multiple statements behind one call,\ncontradicting \"the SQL is exactly what the DSL renders\"\n[…]\nte.\n\nINSERT ... RETURNING stays — its emulation is a single by-PK re-select, mild\nenough that the convenience won. The asymmetry is deliberate.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(adr): record decision not to support RETURNING on UPDATE/DELETE …",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T21:51:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f76981bc00b460a155b3e2d45ff6b8e70b238df8",
"body": "…ion/deadlock failures\n\nA transient serialization failure or deadlock (SQLSTATE 40001 / 40P01; MySQL\nmaps a deadlock to 40001) means the database aborted the transaction to preserve\nisolation and it is safe to retry. These used to surface as a generic\nQueryException, so a caller had to match raw SQL\n[…]\n the AGENTS.md find-or-create recipe (it\nlived in the Recipes section added by #105, which never conflicted with the\nfindById removal in #106).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): add ConcurrencyConflictException for retryable serializat…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T21:41:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e33fc85fd13ded4e645c8e6065380d4b797494cc",
"body": "docs(adr): ADR 0006 — no idiomatic-path nudge",
"is_bot": false,
"headline": "Merge pull request #107 from kormium/docs/adr-no-nudge",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T21:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da693ff32d5caa8486b59881ac5bbd60d186676",
"body": "…nudge\n\n# Conflicts:\n#\tdocs/adr/README.md",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/release/0.9.0' into docs/adr-no-…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T19:28:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df2d45c4cb656f59e7a2310882a80ab237ec9e97",
"body": "feat(core)!: typed findOne replaces untyped findById; eq null restricted to nullable columns",
"is_bot": false,
"headline": "Merge pull request #106 from kormium/feat/typed-findone",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T19:25:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c34d285cfa0c1a11b3e6f52a2a021e1cf1a108e0",
"body": "Decline the \"#4\" idea of nudging callers off low-level APIs via a @RequiresOptIn\nmarker or a detekt rule. The premise mostly doesn't hold: join .select() is a\nfirst-class typed API (not an escape hatch), execute() binds params and is the\nlegit DDL path, and only RawExpression is genuinely unsafe — a\n[…]\nd the proactive nudge is already delivered by AGENTS.md +\nits Recipes section. KISS: keep the escape hatches plainly available, steer via\ndocs.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(adr): record decision not to add an idiomatic-path nudge (ADR 0006)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T19:12:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f545f08644f1714446ba22357b61c58e1c275f82",
"body": "…ct eq null to nullable columns\n\nTwo findings from an audit of the compiler errors agents hit on common mistakes.\n\n1. findById(id: Any) was the only untyped read in the API: it silently accepted a\n wrong-typed id (a String for a Uuid key), bypassed the primary-key column's\n converter, and threw \n[…]\nage (outside-scope -> stdlib find,\ncross-catalog receiver mismatch, orderBy needs ASC/DESC, column-to-column\ncomparisons aren't cross-checked).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core)!: replace untyped findById(Any) with typed findOne; restri…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T19:03:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f6ffb151c0683ae328faa8e31fdfe9248b8ba85e",
"body": "docs(agents): Recipes section — copy-ready golden patterns",
"is_bot": false,
"headline": "Merge pull request #105 from kormium/feat/agents-recipes",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T18:49:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "713c994a4014dddabf98c693ff329e6b47ca7a82",
"body": "Six common-task patterns built only from the typed DSL (no raw SQL), so an agent\ncopies a verified shape instead of inventing one: dynamic/optional filters,\nkeyset pagination, soft-delete, optimistic locking, order-preserving batch\ninsert, and find-or-create. Placed between \"Which form for what\" and \"Gotchas\".\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(agents): add a Recipes section with copy-ready golden patterns",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T18:22:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "352c42269b65f4dd1ee84beb064f6a710dd91dfd",
"body": "feat(core): key CASE structurally (no val needed to read it back)",
"is_bot": false,
"headline": "Merge pull request #104 from kormium/feat/case-structural-key",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T18:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d7f97cb631fcd130311556d35391f6afdea44e3",
"body": "feat: length() string function (portable character count, CHAR_LENGTH on MySQL)",
"is_bot": false,
"headline": "Merge pull request #103 from kormium/feat/length-function",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T17:58:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca3cdb9f65cd16bfeb6d3e9e02cab3650a1288c",
"body": "…function\n\n# Conflicts:\n#\tkormium-sqlite/src/commonTest/kotlin/SqliteIntegrationTest.kt",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/release/0.9.0' into feat/length-…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T17:58:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a76ffe926122942bbf4649ed0d4bdee5b77559d6",
"body": "CASE was the last computed expression keyed by instance identity, forcing a\n`val` to read it back from a row (`val tier = case { }; row[tier]`). Key it\nstructurally instead, like COALESCE / arithmetic / aggregates: render the CASE\nwith its branch literals inlined (a new key-mode ParamBuilder that re\n[…]\nentical\ncase { } reads back. ParamBuilder's public constructor is unchanged (the primary\nis now private; a secondary keeps the same signature).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): key CASE structurally so it reads back without a val",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T17:53:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5c9f526ad2fea9d3e48e80961f11f17616217102",
"body": "feat: N-ary COALESCE (vararg columns + chainable literal fallback)",
"is_bot": false,
"headline": "Merge pull request #102 from kormium/feat/coalesce-vararg",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T17:44:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dc92082fa519dfe0ef1f9b758833b28bbe5ebfd",
"body": "Adds a `length()` string function returning the character count as a\nNumericExpr<Int> — so it compares, does arithmetic, reads from a select(...)\nprojection and orders, like any numeric expression (`name.length() gtEq 3`).\n\nIt renders the dialect's character-length function via a new\nDialect.renderC\n[…]\nTest.testLength (char count read back + a length\npredicate). docs/queries.md + AGENTS.md updated; length added to the modeled\nscalar functions.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: length() — character count, portable across dialects",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T17:38:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7cfc9a05130efc379ff0c5d1f834a5ecefa1d418",
"body": "…lback\n\nGeneralizes the two-column coalesce to any number: `a.coalesce(b, c, …)` for\nthe first non-null of several columns, and `a.coalesce(b).coalesce(\"default\")`\nto extend a COALESCE (more columns or a trailing literal). All render a single\nflat COALESCE(...). The single-column overload is subsume\n[…]\n included).\n\nTests: SqliteIntegrationTest.testCoalesceVararg (COALESCE(note, displayName,\n'Z') read back). docs/queries.md + AGENTS.md updated.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: N-ary COALESCE — more columns via vararg, chainable literal fal…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T17:26:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a40d7f8e0bf5bb925ade6b05dff9ac791cd9be7c",
"body": "feat: order by a computed expression (e.g. lower(name)), not just a column",
"is_bot": false,
"headline": "Merge pull request #101 from kormium/feat/orderby-expression",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T16:41:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "096e875a00cab9258b0d94708c72d02d74cd9a63",
"body": "fix: override dialect in the web-engine databases (db.dialect exact on web)",
"is_bot": false,
"headline": "Merge pull request #100 from kormium/feat/web-dialect",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T16:26:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f37ad802b957518be3a86bdbed48edb2e7cb6b1",
"body": "orderBy now accepts any Selectable, so a query can sort by lower(name) for a\ncase-insensitive order, by arithmetic, etc. — not only a plain column. The\nOrderByDsl ASC/DESC and Query.orderBy widen from Column to Selectable (a Column\nis a Selectable, so existing `orderBy DESC col` and Query(orderBy = \n[…]\nensitive order where the binary default would not). docs/queries.md +\nAGENTS.md updated; expression-ordering removed from the unsupported list.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: order by a computed expression, not just a column",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T16:18:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9178675cb4be8283e9862d283f18556d9a62ea16",
"body": "The browser/Node databases (SqliteWasmDatabase, PgDatabase, MySqlDatabase,\nNodeSqliteDatabase) implement SuspendDatabase only, so they compiled on the\nStandardDialect default — meaning db.dialect / db.renderSql rendered neutral\nSQL instead of the backend's. Override dialect with their real dialect (already\nimported for the executor), so the dialect is exact on the web stack too.\n\nResolves the follow-up noted in ADR 0003.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: override dialect in the web-engine databases too",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T13:27:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d2bf19ff6c385af54287fd28835d01bfb7a905b5",
"body": "feat: correlated EXISTS via Table.any { } / Table.none { }",
"is_bot": false,
"headline": "Merge pull request #99 from kormium/feat/exists-any-none",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T13:23:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e52f03e072cde96ad2227b41493bd4f5b9c3e335",
"body": "Models the common subquery — \"is there a related row?\" — as a Kotlin-idiomatic\nquantifier on the table: `Table.any { predicate }` renders\n`EXISTS (SELECT 1 FROM table WHERE predicate)`, `Table.none { }` renders\n`NOT EXISTS`. The predicate is an ordinary boolean expression and references\nthe outer qu\n[…]\nnone, correlation +\ninner condition). docs/queries.md gains an Existence section and drops EXISTS\nfrom the unsupported list; AGENTS.md updated.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: correlated EXISTS via Table.any { } / Table.none { } (+ ADR 0004)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T13:10:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a1e7a27f9b0aa4345d1185823b4834c95e73bf4c",
"body": "feat: arithmetic in SELECT projections, with structural result keys",
"is_bot": false,
"headline": "Merge pull request #98 from kormium/feat/arithmetic-projection",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T12:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16ca0f1fc2cf643a6157a282d8579b262bedc244",
"body": "Makes NumericExpr a Selectable, so column arithmetic (+ - * / %) can be\nprojected and read back, not just used in WHERE / update set. ArithmeticOp\nreads through its columnType and keys structurally.\n\nTo key computed expressions including their literals (so a projection reads\nback with a fresh instan\n[…]\nALESCE-with-literal fresh\nread). docs/queries.md gains an Arithmetic section and drops arithmetic from the\nunsupported list; AGENTS.md updated.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: arithmetic in SELECT projections, with structural result keys",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T12:21:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b9305fabbbc2c620245506e04e5d0fc98815e15f",
"body": "feat: searched CASE — conditional values, type inferred for built-ins",
"is_bot": false,
"headline": "Merge pull request #97 from kormium/feat/case-expression",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T12:18:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdc14cc6474fff4d835bddde3fca88853e005591",
"body": "feat: COALESCE — null fallback as a typed, readable expression",
"is_bot": false,
"headline": "Merge pull request #95 from kormium/feat/coalesce",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T11:40:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "510f53186275eaf2cd44ba4b393b9241604747a4",
"body": "Adds `case { whenever(cond) then value; …; otherwise(default) }` rendering a\nsearched CASE WHEN ... THEN ... ELSE ... END. The result is a Selectable<Z>\ncarrying a ColumnType, so it reads back from a select(...) projection and a\ncompared literal binds through it (eq/neq/gt/gtEq/less/lessEq overloads\n[…]\negrationTest.testCase (bucket-label read-back + predicate filter).\ndocs/queries.md + AGENTS.md updated; CASE removed from the unsupported list.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: searched CASE — conditional values, type inferred for built-ins",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T11:36:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c3d4a26321a7589b1d553e39a89ee3b23798f4ba",
"body": "Adds `column.coalesce(default)` and `column.coalesce(otherColumn)`, rendering\n`COALESCE(...)`. The result is a Selectable<Z> (readable from a select(...)\nprojection) carrying the source column's ColumnType, so it reads back through\nthe right reader and a compared literal binds through the column's c\n[…]\nback with fallback + predicate\ntreating NULL as the fallback). docs/queries.md + AGENTS.md updated; COALESCE\nremoved from the unsupported list.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: COALESCE — null fallback as a typed, readable expression",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T11:16:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f5b6ede5d02b958adcf1dca91ba39c0bad95e0df",
"body": "feat: renderSql — render a query's SQL without a connection",
"is_bot": false,
"headline": "Merge pull request #94 from kormium/feat/render-sql",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T09:41:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd19462c2911a495d549e849c263743b5be9ab94",
"body": "SqliteAndroidDriver implements SqliteDriver, which now requires `dialect`;\nflip its private field to override (CI caught the androidMain target, which\nisn't compiled in the local JVM run).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: override dialect in the Android SQLite driver too",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T09:25:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "054dfe884f588970317ecfc8a9351767cd65b3e7",
"body": "Capture why `dialect` moved from private to a public member of Database/\nSuspendDatabase (renderSql needs it; pre-1.0 timing; dialect-only scope), with\nthe alternatives considered. Referenced from the renderSql commit.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: ADR 0003 — record the public-dialect-on-Database decision",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T09:20:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae4a88754af823556c375eb20670349fd6395c44",
"body": "Adds RenderScope<G> and RenderedSql: a render-scope whose operations return\nthe SQL they would run instead of executing it. Same call-site syntax as a\ntransaction/autocommit body, a different return type (the Scope vs SuspendScope\npattern, a third sibling). Full coverage: find/count/findById/all, in\n[…]\nlity.\n\nTests: SqliteIntegrationTest.testRenderSqlWithoutExecuting (reads, writes, join,\noffline + db.renderSql). Cookbook recipe + AGENTS note.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: renderSql — render a query's SQL + params without a connection",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T09:19:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2c6b0cec3474eba2be025a0901fb8c1572a1e7eb",
"body": "feat: string scalar functions (lower/upper/trim/ltrim/rtrim)",
"is_bot": false,
"headline": "Merge pull request #93 from kormium/feat/string-scalar-functions",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T08:06:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f62fb71de06ef9989b2bb102d8ab84f9a8c2003",
"body": "Show how to do case-insensitive equality/LIKE with explicit lower() on both\nsides, the functional-index tip for performance, and a link to ADR 0002 for\nwhy there is no ilike operator.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: cookbook recipe for case-insensitive match (the ilike replacement)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T07:37:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fa49474fb4b652c9d2f00cd58ad71edf679ceb8e",
"body": "…cision\n\nThe rationale for not adding `ilike` (engine-collation non-portability,\nhidden index impact, determinism via explicit lower()) lived only in the PR\ndescription. Capture it as an ADR, list it in the ADR index, and link it from\nthe collation note in docs/queries.md.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: ADR 0002 — record the deliberate no-ilike / explicit-lower() de…",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T07:35:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d50b2f6b3d89e8ec57ee5cd8ad66a6c75b95a09e",
"body": "Adds a StringExpr type (mirroring NumericExpr) and the scalar functions\nlower(), upper(), trim(), ltrim(), rtrim() on both Column<String> and\nStringExpr, so they chain (name.trim().lower()) and read back from a\nselect(...) projection. A general StringFunction node renders FN(args) and\nkeys structura\n[…]\n-to-column case-insensitive match, trim, literal compare, lexicographic\nordering, and reading a function projection back with a fresh instance.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: string scalar functions (lower/upper/trim/ltrim/rtrim)",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T07:32:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3c793747a84a3afc86a00f0897583890a6412705",
"body": "feat: BETWEEN predicate via an inclusive Kotlin range",
"is_bot": false,
"headline": "Merge pull request #92 from kormium/feat/between-predicate",
"author_name": "Sergey Knyazev",
"author_login": "knyazevs",
"committed_at": "2026-06-30T06:40:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 9,
"commits_last_year": 306,
"latest_release_at": "2026-07-12T16:52:46Z",
"latest_release_tag": "v0.11.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 7,
"days_since_latest_release": 11,
"mean_days_between_releases": 4.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 0,
"stars": 18,
"watchers": 3,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 29
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"sample",
"samples"
],
"has_llms_txt": true,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"benchmarks/build.gradle.kts",
"build.gradle.kts",
"kormium-bom/build.gradle.kts",
"kormium-core/build.gradle.kts",
"kormium-decimal/build.gradle.kts",
"kormium-jdbc/build.gradle.kts",
"kormium-ktor-di/build.gradle.kts",
"kormium-ktor-koin/build.gradle.kts",
"kormium-ktor/build.gradle.kts",
"kormium-migrate/build.gradle.kts",
"kormium-mysql-dialect/build.gradle.kts",
"kormium-mysql-node/build.gradle.kts",
"kormium-mysql/build.gradle.kts",
"kormium-observe/build.gradle.kts",
"kormium-postgres-dialect/build.gradle.kts",
"kormium-postgres-node/build.gradle.kts",
"kormium-postgres/build.gradle.kts",
"kormium-r2dbc/build.gradle.kts",
"kormium-sqlite-dialect/build.gradle.kts",
"kormium-sqlite-js/build.gradle.kts",
"kormium-sqlite-node/build.gradle.kts",
"kormium-sqlite-wasm/build.gradle.kts",
"kormium-sqlite/build.gradle.kts",
"kormium-wasm-driver/build.gradle.kts",
"samples/cross-instance-cache/build.gradle.kts",
"samples/crud-sqlite/build.gradle.kts",
"samples/ktor-di/build.gradle.kts",
"samples/ktor-koin/build.gradle.kts",
"samples/r2dbc/build.gradle.kts",
"samples/repository/build.gradle.kts",
"samples/sharding/build.gradle.kts",
"samples/sqlite-cache/build.gradle.kts",
"samples/wasm-todo/build.gradle.kts"
],
"largest_source_bytes": 9385376,
"source_files_sampled": 252,
"oversized_source_files": 2,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 18750
},
"dependencies": {
"manifests": [
"benchmarks/build.gradle.kts",
"build.gradle.kts",
"kormium-bom/build.gradle.kts",
"kormium-core/build.gradle.kts",
"kormium-decimal/build.gradle.kts",
"kormium-jdbc/build.gradle.kts",
"kormium-ktor-di/build.gradle.kts",
"kormium-ktor-koin/build.gradle.kts",
"kormium-ktor/build.gradle.kts",
"kormium-migrate/build.gradle.kts",
"kormium-mysql-dialect/build.gradle.kts",
"kormium-mysql-node/build.gradle.kts",
"kormium-mysql/build.gradle.kts",
"kormium-observe/build.gradle.kts",
"kormium-postgres-dialect/build.gradle.kts",
"kormium-postgres-node/build.gradle.kts",
"kormium-postgres/build.gradle.kts",
"kormium-r2dbc/build.gradle.kts",
"kormium-sqlite-dialect/build.gradle.kts",
"kormium-sqlite-js/build.gradle.kts",
"kormium-sqlite-node/build.gradle.kts",
"kormium-sqlite-wasm/build.gradle.kts",
"kormium-sqlite/build.gradle.kts",
"kormium-wasm-driver/build.gradle.kts"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp"
],
"fixed_version": "5.0.7",
"advisory_count": 1,
"oldest_advisory_days": 3
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.3",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-v2hh-gcrm-f6hx"
],
"fixed_version": "4.1.1",
"advisory_count": 1,
"oldest_advisory_days": 2
},
{
"name": "js-yaml",
"direct": false,
"version": "4.2.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m"
],
"fixed_version": "4.3.0",
"advisory_count": 1,
"oldest_advisory_days": 3
},
{
"name": "serialize-javascript",
"direct": false,
"version": "6.0.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 8.1,
"advisory_ids": [
"GHSA-5c6j-r48x-rmvq",
"GHSA-qj8w-gfj5-8c6v"
],
"fixed_version": "7.0.5",
"advisory_count": 2,
"oldest_advisory_days": 146
},
{
"name": "diff",
"direct": false,
"version": "7.0.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-73rr-hh4g-fpgx"
],
"fixed_version": "8.0.3",
"advisory_count": 1,
"oldest_advisory_days": 190
},
{
"name": "webpack",
"direct": false,
"version": "5.101.3",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 3.7,
"advisory_ids": [
"GHSA-38r7-794h-5758",
"GHSA-8fgc-7cc6-rx7x"
],
"fixed_version": "5.104.1",
"advisory_count": 2,
"oldest_advisory_days": 168
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"high": 4,
"moderate": 1
},
"advisory_count": 8,
"affected_count": 6,
"assessed_count": 376,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@colors/colors",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "@discoveryjs/json-ext",
"direct": false,
"version": "0.6.3",
"ecosystem": "npm"
},
{
"name": "@isaacs/cliui",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.13",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/source-map",
"direct": false,
"version": "0.3.11",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.31",
"ecosystem": "npm"
},
{
"name": "@js-joda/core",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "@kormium/sqlite-wasm-worker",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "@pkgjs/parseargs",
"direct": false,
"version": "0.11.0",
"ecosystem": "npm"
},
{
"name": "@socket.io/component-emitter",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@sqlite.org/sqlite-wasm",
"direct": false,
"version": "3.53.0-build1",
"ecosystem": "npm"
},
{
"name": "@types/cors",
"direct": false,
"version": "2.8.19",
"ecosystem": "npm"
},
{
"name": "@types/eslint",
"direct": false,
"version": "9.6.1",
"ecosystem": "npm"
},
{
"name": "@types/eslint-scope",
"direct": false,
"version": "3.7.7",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.9",
"ecosystem": "npm"
},
{
"name": "@types/json-schema",
"direct": false,
"version": "7.0.15",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "26.1.1",
"ecosystem": "npm"
},
{
"name": "@types/ws",
"direct": false,
"version": "8.18.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/ast",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/floating-point-hex-parser",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/helper-api-error",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/helper-buffer",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/helper-numbers",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/helper-wasm-bytecode",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/helper-wasm-section",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/ieee754",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/leb128",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/utf8",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/wasm-edit",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/wasm-gen",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/wasm-opt",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/wasm-parser",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webassemblyjs/wast-printer",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "@webpack-cli/configtest",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "@webpack-cli/info",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "@webpack-cli/serve",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "@xtuc/ieee754",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "@xtuc/long",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "1.3.8",
"ecosystem": "npm"
},
{
"name": "acorn",
"direct": false,
"version": "8.17.0",
"ecosystem": "npm"
},
{
"name": "acorn-import-phases",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.20.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "ajv-keywords",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "6.2.3",
"ecosystem": "npm"
},
{
"name": "anymatch",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "aws-ssl-profiles",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "base64id",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "baseline-browser-mapping",
"direct": false,
"version": "2.10.43",
"ecosystem": "npm"
},
{
"name": "better-sqlite3",
"direct": false,
"version": "12.11.1",
"ecosystem": "npm"
},
{
"name": "binary-extensions",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "bindings",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "bl",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "1.20.6",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.16",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "browser-stdout",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.28.6",
"ecosystem": "npm"
},
{
"name": "buffer",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "buffer-from",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "camelcase",
"direct": false,
"version": "6.3.0",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30001805",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "chokidar",
"direct": false,
"version": "3.6.0",
"ecosystem": "npm"
},
{
"name": "chokidar",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "chrome-trace-event",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "7.0.4",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "clone-deep",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "colorette",
"direct": false,
"version": "2.0.20",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "12.1.0",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "2.20.3",
"ecosystem": "npm"
},
{
"name": "concat-map",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "connect",
"direct": false,
"version": "3.7.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.6",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "custom-event",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "date-format",
"direct": false,
"version": "4.0.14",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "2.6.9",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "decamelize",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "decompress-response",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "deep-extend",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "denque",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "destroy",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "detect-libc",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "di",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "dom-serialize",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "eastasianwidth",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.5.389",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "9.2.2",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "engine.io",
"direct": false,
"version": "6.6.9",
"ecosystem": "npm"
},
{
"name": "engine.io-parser",
"direct": false,
"version": "5.2.3",
"ecosystem": "npm"
},
{
"name": "enhanced-resolve",
"direct": false,
"version": "5.24.2",
"ecosystem": "npm"
},
{
"name": "ent",
"direct": false,
"version": "2.2.2",
"ecosystem": "npm"
},
{
"name": "envinfo",
"direct": false,
"version": "7.21.0",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-module-lexer",
"direct": false,
"version": "1.7.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "eslint-scope",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "esrecurse",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "eventemitter3",
"direct": false,
"version": "4.0.7",
"ecosystem": "npm"
},
{
"name": "events",
"direct": false,
"version": "3.3.0",
"ecosystem": "npm"
},
{
"name": "expand-template",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "extend",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fastest-levenshtein",
"direct": false,
"version": "1.0.16",
"ecosystem": "npm"
},
{
"name": "file-uri-to-path",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "flat",
"direct": false,
"version": "5.0.2",
"ecosystem": "npm"
},
{
"name": "flatted",
"direct": false,
"version": "3.4.2",
"ecosystem": "npm"
},
{
"name": "follow-redirects",
"direct": false,
"version": "1.16.0",
"ecosystem": "npm"
},
{
"name": "foreground-child",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "format-util",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "fs-constants",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "fs.realpath",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "generate-function",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "github-from-package",
"direct": false,
"version": "0.0.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "10.5.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "7.2.3",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "glob-to-regexp",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "has-tostringtag",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "he",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy",
"direct": false,
"version": "1.18.1",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.4.24",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.6.3",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "import-local",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "inflight",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "1.3.8",
"ecosystem": "npm"
},
{
"name": "interpret",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "is-binary-path",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-core-module",
"direct": false,
"version": "2.16.2",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "is-path-inside",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "is-plain-obj",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-plain-object",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "is-property",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "is-regex",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "is-unicode-supported",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "isbinaryfile",
"direct": false,
"version": "4.0.10",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isobject",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "jackspeak",
"direct": false,
"version": "3.4.3",
"ecosystem": "npm"
},
{
"name": "jest-worker",
"direct": false,
"version": "27.5.1",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "json-parse-even-better-errors",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "karma-chrome-launcher",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "karma-mocha",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "karma-sourcemap-loader",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "karma-webpack",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "kotlin-web-helpers",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "loader-runner",
"direct": false,
"version": "4.3.2",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": false,
"version": "4.18.1",
"ecosystem": "npm"
},
{
"name": "log-symbols",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "log4js",
"direct": false,
"version": "6.9.1",
"ecosystem": "npm"
},
{
"name": "long",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "10.4.3",
"ecosystem": "npm"
},
{
"name": "lru.min",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "merge-stream",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime",
"direct": false,
"version": "2.6.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.52.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "2.1.35",
"ecosystem": "npm"
},
{
"name": "mimic-response",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "9.0.9",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "mkdirp",
"direct": false,
"version": "0.5.6",
"ecosystem": "npm"
},
{
"name": "mkdirp-classic",
"direct": false,
"version": "0.5.3",
"ecosystem": "npm"
},
{
"name": "mocha",
"direct": false,
"version": "11.7.5",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "mysql2",
"direct": false,
"version": "3.22.5",
"ecosystem": "npm"
},
{
"name": "named-placeholders",
"direct": false,
"version": "1.1.6",
"ecosystem": "npm"
},
{
"name": "napi-build-utils",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "0.6.3",
"ecosystem": "npm"
},
{
"name": "neo-async",
"direct": false,
"version": "2.6.2",
"ecosystem": "npm"
},
{
"name": "node-abi",
"direct": false,
"version": "3.92.0",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "2.0.51",
"ecosystem": "npm"
},
{
"name": "normalize-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "p-try",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "package-json-from-dist",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-is-absolute",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-parse",
"direct": false,
"version": "1.0.7",
"ecosystem": "npm"
},
{
"name": "path-scurry",
"direct": false,
"version": "1.11.1",
"ecosystem": "npm"
},
{
"name": "pg",
"direct": false,
"version": "8.13.1",
"ecosystem": "npm"
},
{
"name": "pg-cloudflare",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "pg-connection-string",
"direct": false,
"version": "2.14.0",
"ecosystem": "npm"
},
{
"name": "pg-int8",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "pg-pool",
"direct": false,
"version": "3.14.0",
"ecosystem": "npm"
},
{
"name": "pg-protocol",
"direct": false,
"version": "1.15.0",
"ecosystem": "npm"
},
{
"name": "pg-types",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "pgpass",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "pkg-dir",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "postgres-array",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "postgres-bytea",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "postgres-date",
"direct": false,
"version": "1.0.7",
"ecosystem": "npm"
},
{
"name": "postgres-interval",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "prebuild-install",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "pump",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "qjobs",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.3",
"ecosystem": "npm"
},
{
"name": "randombytes",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "rc",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "3.6.2",
"ecosystem": "npm"
},
{
"name": "readdirp",
"direct": false,
"version": "3.6.0",
"ecosystem": "npm"
},
{
"name": "readdirp",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "rechoir",
"direct": false,
"version": "0.8.0",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "requires-port",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "resolve",
"direct": false,
"version": "1.22.12",
"ecosystem": "npm"
},
{
"name": "resolve-cwd",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "rfdc",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "rimraf",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "safe-regex-test",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "schema-utils",
"direct": false,
"version": "4.3.3",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.8.5",
"ecosystem": "npm"
},
{
"name": "serialize-javascript",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shallow-clone",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "simple-concat",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "simple-get",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "socket.io",
"direct": false,
"version": "4.8.3",
"ecosystem": "npm"
},
{
"name": "socket.io-adapter",
"direct": false,
"version": "2.5.8",
"ecosystem": "npm"
},
{
"name": "socket.io-parser",
"direct": false,
"version": "4.2.6",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-js",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "source-map-loader",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "source-map-support",
"direct": false,
"version": "0.5.21",
"ecosystem": "npm"
},
{
"name": "sql-escaper",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "streamroller",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "string-width-cjs",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "strip-ansi-cjs",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "8.1.1",
"ecosystem": "npm"
},
{
"name": "supports-preserve-symlinks-flag",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "tapable",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "tar-fs",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "tar-stream",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "terser",
"direct": false,
"version": "5.49.0",
"ecosystem": "npm"
},
{
"name": "terser-webpack-plugin",
"direct": false,
"version": "5.6.1",
"ecosystem": "npm"
},
{
"name": "tmp",
"direct": false,
"version": "0.2.7",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tunnel-agent",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "1.6.18",
"ecosystem": "npm"
},
{
"name": "ua-parser-js",
"direct": false,
"version": "0.7.41",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "universalify",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "update-browserslist-db",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "util-deprecate",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "utils-merge",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "void-elements",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "wa-sqlite",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "watchpack",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "webpack",
"direct": false,
"version": "5.101.3",
"ecosystem": "npm"
},
{
"name": "webpack-cli",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "webpack-merge",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "webpack-merge",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "webpack-sources",
"direct": false,
"version": "3.5.1",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "wildcard",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "workerpool",
"direct": false,
"version": "9.3.4",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi-cjs",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": false,
"version": "8.21.0",
"ecosystem": "npm"
},
{
"name": "xtend",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "16.2.2",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.3",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "20.2.9",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "yargs-unparser",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "yocto-queue",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 376,
"direct_count": 0,
"indirect_count": 376
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 77,
"open_issues": 29,
"closed_ratio": 0.482,
"closed_issues": 27,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "knyazevs",
"commits": 311,
"avatar_url": "https://avatars.githubusercontent.com/u/48366704?v=4"
},
{
"type": "User",
"login": "uyellowline",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/37348360?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.997
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"ci.yml",
"docs.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"yarn.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/9 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 2,
"reason": "8 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "59c5f1140e65d023f2c302a7fe8109ccaa8d89b8",
"ran_at": "2026-07-24T15:18:59Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-12T16:53:15Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-12T16:43:58Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 9,
"created_at": "2026-06-08T20:44:56Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 10,
"created_at": "2026-06-08T20:44:56Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 14,
"created_at": "2026-06-08T20:45:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17,
"created_at": "2026-06-08T20:45:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 18,
"created_at": "2026-06-08T20:45:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 20,
"created_at": "2026-06-08T20:45:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 21,
"created_at": "2026-06-08T20:45:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 22,
"created_at": "2026-06-08T20:45:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 23,
"created_at": "2026-06-08T20:45:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2026-06-08T20:45:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 34,
"created_at": "2026-06-08T20:53:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 36,
"created_at": "2026-06-08T20:53:41Z",
"last_comment_at": "2026-07-11T09:04:54Z",
"last_comment_author": "knyazevs"
},
{
"number": 37,
"created_at": "2026-06-08T20:53:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2026-06-08T20:54:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 39,
"created_at": "2026-06-08T20:54:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-06-08T20:54:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 42,
"created_at": "2026-06-08T20:54:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 73,
"created_at": "2026-06-14T16:57:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 74,
"created_at": "2026-06-14T17:14:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 75,
"created_at": "2026-06-14T17:14:16Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/kormium/kormium",
"host": "github.com",
"name": "kormium",
"owner": "kormium"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 53 is calibrated to 54 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 53,
"calibrated": 54,
"calibration": "2026-08-02"
}
}
],
"value": 54,
"inputs": {
"security": 50,
"vitality": 81,
"community": 35,
"governance": 34,
"calibration": "2026-08-02",
"engineering": 60,
"ai_readiness": 69,
"weighted_overall_raw": 53
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 81,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"commits_last_year": 306,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "306 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 306
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 9,
"latest_release_tag": "v0.11.0",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 4.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "9 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 9
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 21,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 21 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 21
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 35,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"forks": 0,
"stars": 18,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "18 stars",
"points": 20,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 18
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 34,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.997
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"merged_prs": 77,
"open_issues": 29,
"closed_issues": 27,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.482,
"closed_unmerged_prs": 3,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "48% of issues closed",
"points": 20.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 48
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "77/80 decided PRs merged",
"points": 28.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 77,
"decided": 80
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/9 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "kormium",
"public_repos": 6,
"account_age_days": 45
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of kormium",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "kormium"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~0 yr old",
"points": 6.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "weak",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"kotlin",
"kotlin-multiplatform",
"native",
"orm",
"jvm",
"kmp",
"sql",
"wasm"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/9 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "8 existing vulnerabilities detected",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 376 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 376
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 8,
"affected_packages": 6,
"assessed_packages": 376,
"unassessed_packages": 0,
"affected_by_severity": "high 4, moderate 1, low 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 376,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 69,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "exceptional",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_llms_txt": true,
"legible_history_share": 0.92,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 18750
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": "llms.txt present",
"points": 15,
"status": "met",
"details": [
{
"code": "llms_txt_present",
"params": {}
}
],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "92 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 92,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"yarn.lock"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.59,
"toolchain_manifests": [
"benchmarks/build.gradle.kts",
"build.gradle.kts",
"kormium-bom/build.gradle.kts",
"kormium-core/build.gradle.kts",
"kormium-decimal/build.gradle.kts",
"kormium-jdbc/build.gradle.kts",
"kormium-ktor-di/build.gradle.kts",
"kormium-ktor-koin/build.gradle.kts",
"kormium-ktor/build.gradle.kts",
"kormium-migrate/build.gradle.kts",
"kormium-mysql-dialect/build.gradle.kts",
"kormium-mysql-node/build.gradle.kts",
"kormium-mysql/build.gradle.kts",
"kormium-observe/build.gradle.kts",
"kormium-postgres-dialect/build.gradle.kts",
"kormium-postgres-node/build.gradle.kts",
"kormium-postgres/build.gradle.kts",
"kormium-r2dbc/build.gradle.kts",
"kormium-sqlite-dialect/build.gradle.kts",
"kormium-sqlite-js/build.gradle.kts",
"kormium-sqlite-node/build.gradle.kts",
"kormium-sqlite-wasm/build.gradle.kts",
"kormium-sqlite/build.gradle.kts",
"kormium-wasm-driver/build.gradle.kts",
"samples/cross-instance-cache/build.gradle.kts",
"samples/crud-sqlite/build.gradle.kts",
"samples/ktor-di/build.gradle.kts",
"samples/ktor-koin/build.gradle.kts",
"samples/r2dbc/build.gradle.kts",
"samples/repository/build.gradle.kts",
"samples/sharding/build.gradle.kts",
"samples/sqlite-cache/build.gradle.kts",
"samples/wasm-todo/build.gradle.kts"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "benchmarks/build.gradle.kts, build.gradle.kts, kormium-bom/build.gradle.kts (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "benchmarks/build.gradle.kts, build.gradle.kts, kormium-bom/build.gradle.kts"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Kotlin (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Kotlin"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "59 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 59,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Kotlin",
"largest_source_bytes": 9385376,
"source_files_sampled": 252,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Kotlin (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Kotlin"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/252 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 252,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"sample",
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "sample, samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "sample, samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [],
"scores": {},
"primary": null,
"evidence": [],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-24T15:19:16.490499Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/kormium/kormium.svg",
"full_name": "kormium/kormium",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}