marimo-team/codemirror-sql erreicht einen Gesundheitsindex von 81 von 100 und liegt damit im Bereich Exzellent. Am stärksten schneidet es bei Vitality (89/100) ab, am schwächsten bei Community & Adoption (56/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
81
gesamt / 100
Exzellent
Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
81
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 69 wird auf der veröffentlichten Indexskala auf 81 kalibriert (Register-Kalibrierung 2026-08-02).
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Release-Rhythmus — ein Release etwa alle 39,7 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
11
latest_release_tag
v0.3.0
releases_from_tags
nein
days_since_latest_release
10
mean_days_between_releases
39,7
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
3
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:@marimo-team/codemirror-sql@0.3.0 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 3 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
Handhabbare Dateigrößen — 0/53 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
TypeScript
largest_source_bytes
40.147
source_files_sampled
53
oversized_source_files
0
Eckdaten
17GitHub-Sterne
4Mitwirkende
137Commits, letzte 12 Monate
0Tage seit letztem Push
11Releases
1Bus-Faktor
2offene Issues
npmPaket-Ökosysteme
Warnungen zur Datenerhebung
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 3 ⇿
0Sterne
3Forks
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
OpenSSF Scorecard 6.0 / 10
6.0Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-08-03 00:07 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Abhängigkeits-Advisories 0
Die Installation von npm:@marimo-team/codemirror-sql@0.3.0 zieht 3 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"codemirror",
"codemirror-extension",
"sql"
],
"is_fork": false,
"size_kb": 1548,
"has_wiki": false,
"homepage": "https://marimo-team.github.io/codemirror-sql/",
"languages": {
"Python": 9739,
"TypeScript": 464283
},
"pushed_at": "2026-08-02T18:12:55Z",
"created_at": "2025-07-31T02:26:19Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T14:38:48Z",
"description": "A CodeMirror extension for SQL linting, hover, and completions. With support for DuckDB and BigQuery",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://marimo.io/",
"name": "marimo",
"type": "Organization",
"login": "marimo-team",
"company": null,
"location": null,
"followers": 622,
"avatar_url": "https://avatars.githubusercontent.com/u/98563464?v=4",
"created_at": "2022-01-27T23:44:55Z",
"is_verified": null,
"public_repos": 51,
"account_age_days": 1648
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-23T20:41:36Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2026-06-08T16:05:37Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2026-06-08T15:20:14Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2025-10-15T13:37:07Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2025-09-25T16:00:36Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2025-08-25T16:14:35Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2025-08-25T15:00:03Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-08-10T22:42:11Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2025-08-08T16:12:59Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2025-07-31T19:32:50Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2025-07-31T02:30:34Z"
}
],
"recent_commits": [
{
"oid": "ca192000e6717ed833a550b257139860cb901387",
"body": null,
"is_bot": false,
"headline": "chore: release v0.3.0",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T20:40:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22252fb3910ac3fe00b4a8aa3e7bb5cf2ccc7c8a",
"body": "## Summary\nBroadens unit-test coverage and reduces test boilerplate.\n\nUnit suite (excludes browser-covered `navigation-extension`):\n\n| Metric | Before | After |\n|---|---|---|\n| Statements | 89.1% | **91.6%** |\n| Branches | 81.2% | **85.9%** |\n| Lines | 89.0% | **91.5%** |\n| Tests | 471 | **587** (+1\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "test: expand edge-case coverage and DRY up test helpers (#168)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T19:09:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68ecb204a42409569671ea2127abd4c2c943ee10",
"body": "… (#167)\n\n## What\n\nRegistering the SQL completion sources had gotten unwieldy — each of the\nthree schema-aware sources required its own `dialect.language.data.of({\nautocomplete })` call:\n\n```ts\ndialect.language.data.of({ autocomplete: createCteCompletionSource({ parser }) }),\ndialect.language.data.o\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: sqlCompletion helper to register all completion sources at once…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:39:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "991e53ac8aa19928d1fb57c9faad3432794d8b2a",
"body": "## Summary\n\nTyping a bare identifier prefix now completes columns of the tables\nreferenced in the current statement's `FROM`/`JOIN` clauses — even when\nthe schema defines many tables:\n\n```sql\nSELECT id, name, email\nFROM users\nWHERE active = true\nORDER BY created_at DESC;\n```\n\n`SELECT e` → `email`, `\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: unqualified column completion inferred from the FROM clause (#165)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:32:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2df4518064904a2528511f4bf9d0d9ed69884561",
"body": "…, rename (#166)\n\n## Summary\n\nAdds the classic LSP trio for statement-local SQL identifiers —\ngo-to-definition, document highlights, and rename — and rewrites CTE\ncompletion on top of `QueryContext` (#164). All analyses are purely\nlocal; no schema required.\n\n### CTE completion (`cteCompletionSource`\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: AST-based CTE support: completion, go-to-definition, highlights…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:29:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ef198ccd9fddd530f28f76159941ee2c52a6d85",
"body": "## Summary\n\nNothing in the extension previously understood table aliases: in `SELECT\nu.name FROM users u`, hovering `u` or `u.name` found nothing, and there\nwas no alias-qualified column completion. This PR adds a shared,\nstatement-scoped alias/CTE analysis and uses it in hover and a new\ncompletion \n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: alias resolution for hover and completion (#164)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T17:28:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e690b8d370594f104b27d4eafd83f5fda8b37c83",
"body": "…guous columns) (#163)\n\n## Summary\n\nLinting was syntax-only, even though the extension already accepts a\nfull `SQLNamespace` schema (used by hover). This adds\n**`sqlSemanticLinter`**, a schema-aware linter that reports the\nhighest-value SQL diagnostics:\n\n- **Unknown table** — `FROM`/`JOIN` reference\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: schema-aware semantic diagnostics (unknown tables/columns, ambi…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T15:42:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "575c72eb5b65c09e762ca6d8be9a4a3e7fc27c07",
"body": "Parse the original statement text (comments included) instead of the\ncomment-stripped version. node-sql-parser handles comments natively and\nreports positions relative to the original text, so stripping comments\nbefore parsing shifted error lines/columns in the document.\n\n\n<!-- This is an auto-gener\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "fix: lint diagnostics offset when statements contain comments (#162)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T15:16:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "428d0fb6e202d5da377086fbe5769c701ee6624e",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [typescript](https://www.typescriptlang.org/)\n([source](https://redirect.github.com/microsoft/TypeS\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency typescript to v7 (#153)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:50:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8aad5c5e30fd6fb072270b5c8aa2006b544ca00a",
"body": "- sqlLinter now lints each statement via SqlStructureAnalyzer, reporting\nerrors for every broken statement instead of only the first parse\nfailure\n- SqlStatement carries parse errors so the linter reuses the analyzer's\n per-statement parse (no double-parsing; cached by content)\n- Diagnostic spans widen to cover the offending token instead of one\nchar\n- New SqlLinterConfig options: perStatement (default true) and\n structureAnalyzer (share an instance to reuse its cache)",
"is_bot": false,
"headline": "feat: per-statement linting with token-wide error spans (#161)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:50:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "471028c82b13499a8a3f1835a0d2ea254844d5f5",
"body": "… (#160)\n\nRaise line coverage 73% -> 93% and branch coverage 63% -> 83%.\n\n- Extract computeMarkerStyle from SqlGutterMarker.toDOM so the marker\n color/opacity branches can be unit-tested without an EditorView\n- Add hover-render tests covering the tooltip HTML builders and the\n tooltip create() path (hover.ts 30% -> 97%)\n- Add extractColumnReferences tests for the parser\n- Cover remaining namespace-utils branches (root self/children\n traversal, maxDepth cutoff, self-label matching)",
"is_bot": false,
"headline": "test: improve coverage for hover, gutter, parser, and namespace utils…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:35:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b148dd63b617c1aa80f7fd9264e167c55bd31fa",
"body": "…TE completion (#159)\n\n- structure-analyzer: key the statement cache on document content\ninstead of\na lossy 32-bit hash that could collide and return another document's\nstatements\n- namespace-utils: allow tables literally named \"self\"; only treat\nobjects with\n a Completion-shaped self tag and child\n[…]\nxplicit inactiveOpacity of 0\n- cte-completion-source: scan CTE bodies with balanced parentheses so\nCTEs\n after function calls or subqueries are completed; support column lists\n (WITH a(x, y) AS ...)",
"is_bot": false,
"headline": "fix: correctness bugs in analyzer cache, hover, parser, gutter, and C…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:20:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59ab9bb7880b2341d170763829c0d7d0371eb98f",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [playwright](https://playwright.dev)\n([source](https://redirect.github.com/microsoft/playwright)) |\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency playwright to v1.61.1 (#150)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:20:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "06f246f9439c39a23c4da97b115d8a62142d304a",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | major | `v6` → `v7` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/check\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/checkout action to v7 (#151)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc318b4697a3535a9d2e34e5aa173285e4c6a4b2",
"body": "This PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: (UTC)\n\n- Branch creation\n - \"before 5am on the first day of th\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): lock file maintenance (#152)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "922b3c5521d755a57f3b6fa8f7fbc0a84fcfd0c6",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/setup-node](https://redirect.github.com/actions/setup-node) |\naction | major | `v6` → `v7` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/s\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v7 (#154)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da15ca1250b3fc69a8832e36aa3148a2c28d91a3",
"body": "This adds a minimal AGENTS.md as the canonical agent-context doc, with\nCLAUDE.md as a symlink to it so both the AGENTS.md and CLAUDE.md tool\necosystems resolve the same file. The content is deliberately minimal —\na one-line overview plus verified development commands — since these\nfiles load into every agent context, so every line is a recurring token\ncost. Part of the marimo-team engineering-excellence initiative to give\nagents accurate, low-overhead repo context.",
"is_bot": false,
"headline": "docs: add AGENTS.md with CLAUDE.md symlink (#158)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:19:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1176517e34401831498cb351fabe826d94c8f2f7",
"body": "## What this does\n\nAdds an `autofix.ci` workflow that automatically **pushes** lint fixes\nonto pull requests. When a contributor opens or updates a PR, the\nworkflow runs the repo's mutating fixer (`pnpm run lint`, i.e. `oxlint\n--fix`) and, via the [autofix.ci](https://autofix.ci) GitHub App,\ncommits\n[…]\ne` is exactly `autofix.ci` (required — the service\nidentifies the workflow by name for security) and the\n`autofix-ci/action` step runs last.\n\nPart of the marimo-team engineering-excellence initiative.",
"is_bot": false,
"headline": "ci: add autofix.ci (#157)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-22T17:45:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7481621feb5452b7a788e4ac12122365cf628e61",
"body": "## What changed\n\n- **Lint in CI**: added a plain `pnpm exec oxlint` step to the `test`\njob. The existing `lint` script is `oxlint --fix` (mutating), so CI runs\nthe non-mutating variant. There is no oxlint config file, which is fine\n— oxlint applies its defaults.\n- **Coverage config** (`vite.config.t\n[…]\ned and `coverage/` is\ngitignored.\n\nNo mechanical source fixes were required. Part of the marimo-team\nengineering-excellence initiative to make existing-but-unenforced\nquality gates actually run in CI.",
"is_bot": false,
"headline": "ci: enforce lint and report coverage on PRs (#156)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-22T14:37:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "749da922b383cede131399baa1791d2151a51eaf",
"body": "Sets each workflow's top-level `permissions:` to `{}` (deny-all) and\nmoves the previously top-level grants into the specific jobs that\ninherited them. **Effective permissions are unchanged for every job** —\nthis just makes the grants explicit per job so a newly-added job can't\nsilently inherit broad\n[…]\ntill parse; per-job effective scopes identical). Workflows whose jobs\ninherit the org default are left untouched for a manual per-job pass.\n\n_Flagged by github-maintenance Workflow Permissions Audit._",
"is_bot": false,
"headline": "ci: adopt deny-all top-level workflow permissions (#155)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-14T20:52:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdd67d1eb574d5c2e29966687e2c2c1c557cb888",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.8",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T16:04:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a0447244707ad7f852b693c60a3d2fdec32490d",
"body": "Since v0.2.5 the published npm tarball has been missing\n`src/data/common-keywords.json` and `src/data/duckdb-keywords.json`,\nleaving the `./data/*` exports dead (404 / unresolved module for\nconsumers). PR #128 split the release into separate `build`/`publish`\njobs, but the build job's `upload-artifa\n[…]\nnst the current package and fails if `src/data/*.json` is\ndropped from `files`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): ship src/data/*.json in published tarball (#148)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-06-08T16:04:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "faee1f67e1dbc8fe80953c254c1117a84192d705",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.7",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T15:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1fffb93ec29ed911afee061a6d976c4d3fe0131",
"body": "The `publish` job has no `checkout` step, so `package.json` (with the\n`packageManager` field) only exists after the artifact download. Running\n`pnpm/action-setup` first left it with no pnpm version to read, causing\n\"No pnpm version is specified\".\n\nFix: reorder so the artifact download runs before pnpm setup.\n\nFixes the failure in [this\nrun](https://github.com/marimo-team/codemirror-sql/actions/runs/27144993776/job/80120275403).",
"is_bot": false,
"headline": "fix(ci): download artifact before pnpm setup in publish job (#147)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T15:18:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a17f148ee2da2a867e55c640c1cee1ac2478b5",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.6",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f6c681eabce3338551e3a208098698cb1bf5ea5",
"body": "The `Setup Node.js` step in the `publish` job was over-indented, making\n`release.yml` invalid YAML. This caused the v0.2.5 release runs to fail\nat 0s (\"workflow file issue\") so the publish job never ran — npm latest\nis still 0.2.4.\n\nIntroduced in #128. Fix re-aligns the step to 6 spaces; YAML now parses.",
"is_bot": false,
"headline": "fix(ci): correct YAML indentation in release publish job (#145)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c76558dac0774e61e99d32bb05d8ad644f9691a",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.5",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fde96b159e284b45eb952eae48b64cfc856b9fb6",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[@codemirror/lang-sql](https://redirect.github.com/codemirror/lang-sql)\n| devDependencies | pin | [`^6.10.0` →\n`6.10.0`](https://renovatebot.com/diffs/npm/@codemirror%2flang-sql/6.10.0/6.1\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): pin dependencies (#140)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T16:13:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56203c88e188acfd3341b1cd37a016edc6cdb039",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[@testing-library/dom](https://redirect.github.com/testing-library/dom-testing-library)\n| devDependencies | pin | [`^10.4.1` →\n`10.4.1`](https://renovatebot.com/diffs/npm/@testing-library%\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): pin dependencies (#141)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:31:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2db4db8f0e4fb7633dca41188973dee9777ead30",
"body": "> ℹ️ **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|---|-\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update all non-major dependencies (#137)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:13:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71d354d1a0643e84cbff54da8501d4e3ac8c218d",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/download-artifact](https://redirect.github.com/actions/download-artifact)\n| action | major | `v4` → `v8` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update github artifact actions (major) (#138)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd17c8348a68c283f563bc839807f36a7ea2800a",
"body": null,
"is_bot": false,
"headline": "upgrade lockfile (#139)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T15:07:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cb28c9c2bff0be5888f92a8d7ce24c7149b5fd4",
"body": "This PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: (UTC)\n\n- Branch creation\n - \"before 5am on the first day of th\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): lock file maintenance (#122)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:48:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d60176da88539efffdd47cd794eeb325fe8a990b",
"body": "Fixes misconfigured fields in `pnpm-workspace.yaml`.\n\nSee the tracking issue in github-maintenance.\n\n<!-- github-maintenance:hash=20d1dfc3:script=pnpm-workspace-check -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Fix pnpm-workspace.yaml configuration (#124)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-05-29T14:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ef7617233e01a84bdee96b2a715f0e45256928",
"body": null,
"is_bot": false,
"headline": "upgrade pnpm to v11 (#135)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03ffef8b2f1d4ec2ac219ed0d3496d4fa029c1ca",
"body": null,
"is_bot": false,
"headline": "migrate to oxlint (#133)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:40:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fa853b0f020a8ec826edb2e245e437e4347478a",
"body": "CI was failing from playwright tests",
"is_bot": false,
"headline": "fix playwright config (#134)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc013f2a1906641d7478a63379342751bd548ee3",
"body": null,
"is_bot": false,
"headline": "manual upgrade jsdom (#132)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:34:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "558bc028db8022a6819e752daee7cce6f707cffb",
"body": "> ℹ️ **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|\n[@vitest/browser-playwright]\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0Mi44NS4xIiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update vitest monorepo to ^4.1.7 (#105)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:23:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2651296c455a11ccde9fe991992259caf973d935",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/upload-pages-artifact](https://redirect.github.com/actions/upload-pages-artifact)\n| action | major | `v4` → `v5` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/project\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/upload-pages-artifact action to v5 (#131)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:22:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dcdb606df685b0e4320b93c4052265706e91664c",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/setup-node](https://redirect.github.com/actions/setup-node) |\naction | major | `v4` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/s\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v6 (#130)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:21:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9fa4441052050337a21e0d9b25c206779102dece",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [typescript](https://www.typescriptlang.org/)\n([source](https://redirect.github.com/microsoft/TypeS\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency typescript to v6 (#119)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:18:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a88130dc5531be9807a7f3f55a5110298e88e28",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/configure-pages](https://redirect.github.com/actions/configure-pages)\n| action | major | `v5` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/configure-pages action to v6 (#117)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:17:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a511d34c4e11688d6096f22cb889a6b6fb54d88f",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/deploy-pages](https://redirect.github.com/actions/deploy-pages)\n| action | major | `v4` → `v5` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actio\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/deploy-pages action to v5 (#118)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:16:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7727be799d0a99ba48548970d1b3a0d816021e9f",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup) |\naction | major | `v4` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/pnpm/action\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update pnpm/action-setup action to v6 (#121)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:16:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93ab69e90083ced7cb10fe0f94925595e453d177",
"body": "## Summary\n\nAdds a Dremio SQL dialect export with:\n\n- Dremio reserved keywords\n- Dremio SQL data types, including semi-structured types\n- double-quote identifier support\n- case-insensitive identifier completion\n\nThe keyword/type lists are based on Dremio's SQL reference docs.\n\n## Test Plan\n\n- `pnpm test --run src/__tests__/index.test.ts`\n- `pnpm typecheck`\n- `pnpm build`",
"is_bot": false,
"headline": "feat: add Dremio SQL dialect (#129)",
"author_name": "Matt Corley",
"author_login": "corleyma",
"committed_at": "2026-05-29T02:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480fd871b4173ae03a67041d863d4c0f7d33b594",
"body": "…jobs (#128)\n\nSplits the single release job into 4 jobs so the `id-token: write` scope\nis held only by a publish job that runs `npm publish` exclusively (no\ninstall/test/build/exec).\n\n- **build** (no `id-token`): install, typecheck, test, build, validate,\nupload `dist/` + package metadata as artifac\n[…]\n in to only the scopes it needs.\n\nResolves the supply-chain audit `oidc-publish-fused` finding. Motivated\nby the TanStack npm supply-chain compromise (May 2026). Mirrors\nmarimo-team/codemirror-ai#111.",
"is_bot": false,
"headline": "chore(ci): split release.yml into build/publish/release-notes/notify …",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T17:59:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e24f371ab86186e5e36a49a5fda5bc1e2c3f3ada",
"body": "Splits the single build-and-deploy job into the canonical GitHub Pages\n2-job pattern: build (no `id-token`) → deploy (only `id-token: write`,\nruns deploy-pages only).\n\nResolves the supply-chain audit's OIDC-fused finding on this workflow.",
"is_bot": false,
"headline": "chore(ci): split demo.yml into build + deploy jobs (#127)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T17:25:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8fe76dd08178ecb8be698bf55e39a8d22feb6a1",
"body": "node-24 ships with npm 11+ which already supports OIDC trusted\npublishing, so the `npm install -g npm@latest` step is redundant.\nRemoving it also drops one global install in the same job as `id-token:\nwrite`.",
"is_bot": false,
"headline": "chore(ci): remove redundant npm@latest upgrade (#126)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T16:54:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3388dee917a07a616bf62b407bfe420bd54283f6",
"body": "Adds `\"packageManager\": \"pnpm@10.28.2\"` to `package.json` and drops the\nredundant `version:` arg from `pnpm/action-setup` in CI.\n\nThe action now reads the version from `packageManager`, giving a single\nsource of truth shared between local dev and CI. Matches the convention\nused in `marimo` and `marimo-lsp`.",
"is_bot": false,
"headline": "chore: pin pnpm via packageManager (#123)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T15:13:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63c269a5edd3f1c2abac46a750dba3eaf4546103",
"body": "Co-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Pin GitHub Actions to SHA hashes (#120)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-04-06T14:09:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0409d3de7fd18276e868a35684c50a342ba7dc5",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v8 (#109)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-06T14:09:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2b131abf380f0542a188522abc151885ae340ce",
"body": "Adds missing `pnpm-workspace.yaml` with required fields.\n\nSee the tracking issue in github-maintenance.\n\n<!-- github-maintenance:hash=3d5358e2:script=pnpm-workspace-check -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Fix pnpm-workspace.yaml configuration (#112)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-03-18T15:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cab7e0e695fcf27b5b2585374ba51330290605ad",
"body": "Adds `local>marimo-team/.github:renovate-config` to the `extends` array\nin `renovate.json`.\n\n<!-- github-maintenance:hash=7fdcfb05:script=renovate-config-fix -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Extend org Renovate config preset (#113)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-03-18T15:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a4ed2d605cfae0a63ff5e7e56a91d4e70191a20",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.3.11 (#99)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d87d0f49ba24f3d6366ab386c4fe1b34a552d4c2",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update vitest monorepo to v4.0.17 (#100)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f42a111464ff347a0d9ab3c255fe6127b277421",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency node-sql-parser to v5.4.0 (#104)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c5a9b8757a7a33334f8398082568daabadf9053",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.40.1 (#102)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-29T19:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fba51dfbcb1d37fe923b89365c10cfbfa47f7a5",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.40.0 (#94)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-11T00:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "651ddae854d29c28757011913d0be822e7189bc1",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/checkout action to v6 (#95)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-11T00:48:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed419f05094c4038007e9e59bf092d9a98169d32",
"body": null,
"is_bot": false,
"headline": "ci: oidc (#96)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-12-11T00:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebae5875d2b894052809eabdc2ef4d80088b53ba",
"body": "* update packages and fix renovate bot\n\n* fix test install\n\n* use pnpx but install all\n\n* add playwright as dev dep",
"is_bot": false,
"headline": "update packages, fix renovate bot and playwright test (#93)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-12-10T18:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fc7145412572d6ef3278eecd85403d288d1e101",
"body": "…rt (#92)",
"is_bot": false,
"headline": "perf: only render gutter markers for lines that are within the viewpo…",
"author_name": "Knyntsje",
"author_login": "Knyntsje",
"committed_at": "2025-12-01T04:18:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa7c664135988b634f55a3e57a1327a5ffeede2",
"body": null,
"is_bot": false,
"headline": "avoid renovate bot pr for lint version, upgrade test pkg (#90)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T17:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8f13fd33f0ce9b59442fc2978f79782cad29736",
"body": "* add test\n\n* move to a folder, and update config\n\n* remove screenshot\n\n* add pnpm install chromium\n\n* use pnpx\n\n* use 6.9.1\n\n* rebase",
"is_bot": false,
"headline": "add browser test with playwright for freeze (#88)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T15:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ede6ca8620c143a1b44f02e7ad8d0ad7994cc8f8",
"body": null,
"is_bot": false,
"headline": "fix codemirror/lint for browser freeze (#87)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T13:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b6df099ac920a0071f5b53346b94de1541232ec",
"body": null,
"is_bot": false,
"headline": "update packages and test",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T09:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14cc59aa710bdaa207e7d160ecc3b5681898f412",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency node to v24 (#83)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-11-01T08:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4197696e95e0d76d4dbc463e4fcc5c5d0ddca13f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.39.0 (#85)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-11-01T08:26:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d342b6aeec0bd343b3bea665f3746a1907912e3",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency jsdom to v27.0.1 (#78)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc687c6044daa0348642206ff5a0dbf8fb85b117",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.12 (#79)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4274a9e0aeeb4d3482a8a10084755cd5b2fdbdda",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.3.0 (#80)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb9bf06db5624b300380d2ef7338dbb8fe72f7f1",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.4",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-10-15T13:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d595b3ab1b36e4b799383b0eebfcbd398d80cf93",
"body": "* move codemirror deps to peer deps\n\n* upgrade packages",
"is_bot": false,
"headline": "move codemirror deps to peer deps (#73)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-15T13:35:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55aa3df43c1cd498ac1edaf1676ff069bfa7e558",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v6 (#75)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-15T13:27:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64f760c58f66816ce66ddedac5909ee30cacc242",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.38.1 (#69)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-12T15:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "039ff17a4affc02130fc7b68884bbc5c6c6f9afa",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update github/codeql-action action to v4 (#71)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-12T15:06:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51520f0f2521f0482a7b184f807b5876242ab46d",
"body": null,
"is_bot": false,
"headline": "update all packages (#68)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-04T07:10:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c286e9250637c1c179dff9134c500113f877d5af",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.37.2 (#67)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-04T07:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a5e74fb885f1e84bbd124dc269ce3a3e18b15d8",
"body": "* support better table list extraction\n\n* add import",
"is_bot": false,
"headline": "support better table list extraction (#61)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-04T07:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caef1aa7bc6bb0527c9b783efc9dbea1ee07a9ff",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.37.1 (#62)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-03T04:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b65b3276aae0bd0981b445dbc44bd215cc88d92",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.36.3 (#59)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-29T03:08:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6e651f0621ae9918834be4c72ae1600b9e23db8",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update codemirror (#60)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-29T03:08:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63fefa8c5558a7b2d89fc154133ece63848c9bc6",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.3",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:59:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42cc50223cfdb948dc76b2494dce1dc1157c4416",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.2",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02b6e87a01cda17f89a13a620554c0d32e9ea026",
"body": null,
"is_bot": false,
"headline": "improvement: add another tooltip override (#58)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:45:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e398483181c0ebef4facee77ff56c59e826a274",
"body": "* export types, update packages, fix regression\n\n* fix lockfile",
"is_bot": false,
"headline": "export types, update packages, fix regression (#57)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-09-25T15:37:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c83be451cde1a99c39037caef4e3fdbf39ce4a3",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @codemirror/view to v6.38.3 (#54)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-25T02:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "675dba8998371faf5df67384b6dbe69fed3928cd",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.7 (#55)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-25T02:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a2fbd8bebc1ead1ae7085de61f12986a1a46afe",
"body": null,
"is_bot": false,
"headline": "Update README",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-23T23:38:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83ef3f25c737960b980324bd0177b3cb7baaab06",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.6 (#53)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-21T00:21:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5116887194e8dc77a48dcd9245632bf12f6d4fb",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency jsdom to v27 (#51)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-17T05:27:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba80b57c0e9f0a0f484ec5d5aba8ca60d4ce7446",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @codemirror/lang-sql to v6.10.0 (#52)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-17T05:27:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62be7df5f64f30f25465d39bb305aa82bbbfa4b7",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.2.4 (#49)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-13T04:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7587dc9841b3fe41127469c19eb59ed1479d43de",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.5 (#50)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-13T04:50:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e2f9240eed72c9655276fff667bfd5d1e16d5f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(deps): update codemirror (#46)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db295f8c89bbacd4d3ed30b90b7ef68282da9b20",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.36.2 (#44)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a44bf52e94e33098c6265a5ae31405b18a4c8e6a",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.4 (#45)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49c29f02ab983fe0a640eae2da9477f974885dc7",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(deps): update dependency node-sql-parser to v5.3.12 (#47)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf9321566af3a9f9723e398726e29056fac6cc86",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v5 (#48)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:40:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 137,
"latest_release_at": "2026-07-23T20:41:36Z",
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 24,
"days_since_latest_release": 10,
"mean_days_between_releases": 39.7
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "@marimo-team/codemirror-sql",
"path": "package.json",
"tokens": [
"npm.entry",
"npm.peer_dependencies"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [],
"total": 0,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@marimo-team/codemirror-sql",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"codemirror",
"codemirror-plugin",
"sql"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@marimo-team/codemirror-sql",
"declared_type": null,
"is_deprecated": false,
"latest_version": "0.3.0",
"repository_url": "https://github.com/marimo-team/codemirror-sql",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 11992,
"first_published_at": "2025-07-31T02:30:28.027000Z",
"latest_published_at": "2026-07-23T20:41:22.356000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 3,
"stars": 17,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2025-10-29",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 40147,
"source_files_sampled": 53,
"oversized_source_files": 0,
"agent_instruction_files": [
".cursorrules",
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 862
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": "npm:@marimo-team/codemirror-sql@0.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "node-sql-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.13"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 160,
"open_issues": 2,
"closed_ratio": 0.6,
"closed_issues": 3,
"closed_unmerged_prs": 36
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "mscolnick",
"commits": 44,
"avatar_url": "https://avatars.githubusercontent.com/u/2753772?v=4"
},
{
"type": "User",
"login": "Light2Dark",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/19585239?v=4"
},
{
"type": "User",
"login": "Knyntsje",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/161234462?v=4"
},
{
"type": "User",
"login": "corleyma",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2080732?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.579
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"autofix.yml",
"demo.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/22 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 9,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 5,
"reason": "5 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca192000e6717ed833a550b257139860cb901387",
"ran_at": "2026-08-03T00:07:07Z",
"aggregate_score": 6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 2,
"decided_7d": 3,
"merged_30d": 49,
"authors_30d": 2,
"decided_30d": 52,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 2,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 5,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-07-23T20:41:45Z",
"oldest_open_prs": [
{
"number": 136,
"created_at": "2026-05-29T14:51:12Z",
"last_comment_at": "2026-07-22T14:39:57Z",
"last_comment_author": "github-actions"
},
{
"number": 142,
"created_at": "2026-05-29T16:14:31Z",
"last_comment_at": "2026-08-02T13:13:48Z",
"last_comment_author": "renovate"
},
{
"number": 143,
"created_at": "2026-05-29T16:14:51Z",
"last_comment_at": "2026-07-23T13:23:19Z",
"last_comment_author": "github-actions"
},
{
"number": 144,
"created_at": "2026-05-29T17:36:28Z",
"last_comment_at": "2026-05-29T17:36:31Z",
"last_comment_author": "renovate"
},
{
"number": 149,
"created_at": "2026-06-13T16:15:59Z",
"last_comment_at": "2026-07-30T21:04:15Z",
"last_comment_author": "renovate"
},
{
"number": 207,
"created_at": "2026-07-27T22:16:13Z",
"last_comment_at": "2026-07-27T22:16:16Z",
"last_comment_author": "renovate"
},
{
"number": 208,
"created_at": "2026-07-30T09:59:52Z",
"last_comment_at": "2026-07-30T09:59:55Z",
"last_comment_author": "renovate"
},
{
"number": 209,
"created_at": "2026-08-01T01:36:05Z",
"last_comment_at": "2026-08-01T01:36:46Z",
"last_comment_author": "github-actions"
}
],
"last_merged_pr_at": "2026-07-27T11:02:50Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 2,
"created_at": "2025-07-31T02:27:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 169,
"created_at": "2026-07-24T09:15:49Z",
"last_comment_at": "2026-07-27T05:28:24Z",
"last_comment_author": "Light2Dark"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/marimo-team/codemirror-sql",
"host": "github.com",
"name": "codemirror-sql",
"owner": "marimo-team"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 69,
"calibrated": 81,
"calibration": "2026-08-02"
}
}
],
"value": 81,
"inputs": {
"security": 68,
"vitality": 89,
"community": 56,
"governance": 60,
"calibration": "2026-08-02",
"engineering": 67,
"ai_readiness": 77,
"weighted_overall_raw": 69
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"commits_last_year": 137,
"human_commit_share": 0.48,
"days_since_last_push": 0,
"active_weeks_last_year": 24
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "24/52 weeks with commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 24
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "137 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 137
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 39.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~39.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 39.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"forks": 3,
"stars": 17,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "17 stars",
"points": 19.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 17
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 0,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"packages": [
"@marimo-team/codemirror-sql"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 11992
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "11,992 downloads/month across npm",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 11992,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.579
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 58% of commits",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 58
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"merged_prs": 160,
"open_issues": 2,
"closed_issues": 3,
"prs_merged_7d": 2,
"prs_decided_7d": 3,
"prs_merged_30d": 49,
"prs_decided_30d": 52,
"issue_closed_ratio": 0.6,
"closed_unmerged_prs": 36,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "60% of issues closed",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 60
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "160/196 decided PRs merged",
"points": 24.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 160,
"decided": 196
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 622,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "marimo-team",
"public_repos": 51,
"account_age_days": 1648
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "622 followers of marimo-team",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 622,
"login": "marimo-team"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "51 public repos, account ~4 yr old",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 51
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@marimo-team/codemirror-sql"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 67,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"codemirror",
"codemirror-extension",
"sql"
],
"has_wiki": false,
"homepage": "https://marimo-team.github.io/codemirror-sql/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://marimo-team.github.io/codemirror-sql/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 68,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "5 existing vulnerabilities detected",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@marimo-team/codemirror-sql@0.3.0 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@marimo-team/codemirror-sql@0.3.0",
"assessed": 3
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 77,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.958,
"agent_instruction_files": [
".cursorrules",
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 862
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".cursorrules, AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".cursorrules, AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 48 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 48
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.48
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "48 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 48,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 40147,
"source_files_sampled": 53,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/53 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 53,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 17
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "npm.entry",
"weight": 8
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "declared",
"label": "library",
"source": "npm.peer_dependencies",
"weight": 3
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"library"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-03T00:07:23.732251Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/marimo-team/codemirror-sql.svg",
"full_name": "marimo-team/codemirror-sql",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit marimo-team/codemirror-sql teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.3.1, Schema v0.30.0 — vollständige Methodik · Metriken-Wiki.
