Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.26.0 · Metriken 1.13.0 · 2026-07-22 11:55 UTC
maurigre / mgr-method
MGR — Método Governado por Rastreabilidade (Traceability-Governed Method): spec-driven development framework for coding agents, portable between Claude Code and GitHub Copilot
maurigre/mgr-method erreicht einen Gesundheitsindex von 57 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Engineering Quality (86/100) ab, am schwächsten bei Security (33/100). Zuletzt vor 1 Tag aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
57
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
57
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Mauri G. ReisPersönliches Konto
15 Follower46 öffentliche Reposseit Aug. 2014
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht | Tags |
|---|---|---|---|---|---|---|
| npm | mgr-method | 0.5.0 | 2.314 | 14 | vor 5 Tagen | spec-driven-developmentsddagent-skillsclaude-codegithub-copilotcoding-agentsai-agentsadrarchitecture-decision-recordscode-reviewdeveloper-toolsclihexagonal |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
68
Entwicklungsaktivität
55Mittel
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 1 Tagen |
| 2.1/36 | Commit-Rhythmus — 3/52 Wochen mit Commits |
| 16.7/18 | Commit-Volumen — 71 Commits im letzten Jahr |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Verwendete Eingangsdaten
| commits_last_year | 71 |
| human_commit_share | 1 |
| days_since_last_push | 1 |
| active_weeks_last_year | 3 |
Release-Disziplin
88Exzellent
Wie die Bewertung erfolgt
| 16.2/27 | Liefert Releases aus — 15 Versions-Tags (keine GitHub-Releases) |
| 36/36 | Release-Aktualität — letztes Release vor 5 Tagen |
| 27/27 | Release-Rhythmus — ein Release etwa alle 1,1 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 15 |
| latest_release_tag | v0.5.0 |
| releases_from_tags | ja |
| days_since_latest_release | 5 |
| mean_days_between_releases | 1,1 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
37
Popularität & Verbreitung
1Kritisch
Wie die Bewertung erfolgt
| 0/60 | Stars — 2 Stars |
| 0/25 | Forks — 0 Forks |
| 0/15 | Watcher — 0 Watcher |
Verwendete Eingangsdaten
| forks | 0 |
| stars | 2 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
64Mittel
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 16.9/22.5 | Lizenz — Lizenzdatei vorhanden, keine anerkannte Lizenz |
| 18/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | ja |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| has_pull_request_template | nein |
Wie die Bewertung erfolgt
| 44.9/80 | Downloads pro Monat — 2.314 Downloads/Monat über npm |
| 0/20 | Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen |
Verwendete Eingangsdaten
| packages | mgr-method |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2.314 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
54
Maintainer-Resilienz (Bus-Faktor)
10Kritisch
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 0/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits |
| 1.4/13.5 | Breite der Beitragenden — 1 Beitragende |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Wie die Bewertung erfolgt
| 0/46.8 | Issue-Lösungsquote — keine Issues oder keine Daten |
| 38.2/38.3 | PR-Annahme — 6/6 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/22 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 6 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote. Die verbleibenden Gewichte wurden renormalisiert.
Eigentümerschaft & Trägerschaft
54Mittel
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 8.7/25 | Reichweite des Inhabers — 15 Follower von maurigre |
| 24.2/25 | Kontohistorie — 46 öffentliche Repos, Kontoalter ca. 11 Jahre |
Verwendete Eingangsdaten
| followers | 15 |
| owner_type | User |
| is_verified | — |
| owner_login | maurigre |
| public_repos | 46 |
| account_age_days | 4.349 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Paketpflege
100Exzellent
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf npm |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen |
| 20/20 | Versionshistorie — 14 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | mgr-method |
| ecosystems | npm |
| any_deprecated | nein |
| min_days_since_publish | 5 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
86
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 2 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — eslint.config.js |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | ja |
| has_precommit_config | nein |
Dokumentation
90Exzellent
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — https://www.npmjs.com/package/mgr-method |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 13 Topics |
| 0/10 | Wiki |
Verwendete Eingangsdaten
| topics | agent-skills, ai-agents, architecture-decision-records, claude-code, cli, code-review, coding-agents, developer-tools, github-copilot, nodejs, sdd, spec-driven-development, specification |
| has_wiki | nein |
| homepage | https://www.npmjs.com/package/mgr-method |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
33
Sicherheitslage
33Gefährdet
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/22 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Lizenz — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — keine Daten |
| 2.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6/7.5 | Vulnerabilities — 2 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3,3 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
46
AI-Agentenkontext & Leitlinien
40Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 40/40 | Lesbare Commit-Historie — 69 von 71 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,972 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
AI-Verify-Loop (Build / Test / Typprüfung)
48Gefährdet
Wie die Bewertung erfolgt
| 0/18 | Bootstrap mit einem Befehl |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — eslint.config.js |
| 0/11 | Statische Typprüfung |
| 10/10 | Reproduzierbare Umgebung — lockfile |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 71 |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 5/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | package-lock.json |
| has_dockerfile | nein |
| typed_language | nein |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
55Mittel
Wie die Bewertung erfolgt
| 0/45 | Typprüfbarer Code — JavaScript ohne Typprüfungs-Konfiguration |
| 55/55 | Handhabbare Dateigrößen — 0/15 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | JavaScript |
| largest_source_bytes | 22.188 |
| source_files_sampled | 15 |
| oversized_source_files | 0 |
Eckdaten
2GitHub-Sterne
1Mitwirkende
71Commits, letzte 12 Monate
1Tage seit letztem Push
15Releases
1Bus-Faktor
0offene Issues
npmPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index npm:mgr-method@0.5.0; advisories assessed against the repository dependency graph instead
Weitere Details
OpenSSF Scorecard 3.3 / 10
3.3Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/22 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| k. A. | Packaging | packaging workflow not detected |
| 5 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 5 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| k. A. | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 8 | Vulnerabilities | 2 existing vulnerabilities detected |
Direkte Abhängigkeiten 2
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| npm | @clack/prompts | ^1.7.0 | package.json |
| npm | picocolors | ^1.1.1 | package.json |
Alle Abhängigkeiten nicht erhoben
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"agent-skills",
"ai-agents",
"architecture-decision-records",
"claude-code",
"cli",
"code-review",
"coding-agents",
"developer-tools",
"github-copilot",
"nodejs",
"sdd",
"spec-driven-development",
"specification"
],
"is_fork": false,
"size_kb": 404,
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/mgr-method",
"languages": {
"Shell": 1126,
"JavaScript": 79706
},
"pushed_at": "2026-07-20T12:30:31Z",
"created_at": "2026-07-04T19:41:46Z",
"owner_type": "User",
"updated_at": "2026-07-17T11:27:55Z",
"description": "MGR — Método Governado por Rastreabilidade (Traceability-Governed Method): spec-driven development framework for coding agents, portable between Claude Code and GitHub Copilot",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "maurireis.com.br",
"name": "Mauri G. Reis",
"type": "User",
"login": "maurigre",
"company": null,
"location": "Ribeirão Preto, São Paulo, Brazil",
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/8541648?v=4",
"created_at": "2014-08-25T04:33:19Z",
"is_verified": null,
"public_repos": 46,
"account_age_days": 4349
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-17T11:27:31Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-15T13:41:43Z"
},
{
"tag": "v0.3.8",
"kind": "patch",
"published_at": "2026-07-14T11:59:30Z"
},
{
"tag": "v0.3.7",
"kind": "patch",
"published_at": "2026-07-09T19:57:20Z"
},
{
"tag": "v0.3.6",
"kind": "patch",
"published_at": "2026-07-09T19:33:11Z"
},
{
"tag": "v0.3.5",
"kind": "patch",
"published_at": "2026-07-09T15:27:38Z"
},
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2026-07-09T14:31:07Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-07-09T02:35:36Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-07-07T17:09:46Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-07T11:56:09Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-07T11:39:31Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-07T03:21:29Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-07-06T01:24:33Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-07-06T00:17:20Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-05T16:47:53Z"
}
],
"recent_commits": [
{
"oid": "709491e8a00442cb61d945bcab8ea7da06b43e2a",
"body": null,
"is_bot": false,
"headline": "chore: alinha os keywords do npm aos topics do repositório",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T11:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b0e2923dff60394eb59637b7b505cbcecfdd76e",
"body": "description do pacote em inglês (vitrine npm), mantendo a marca — pendência do\nrelease registrada no completion da spec idioma-canonico-ingles",
"is_bot": false,
"headline": "chore: bump 0.5.0",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T10:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83035806613d2ed158222f862e6a7b428854d750",
"body": "…changelog",
"is_bot": false,
"headline": "docs: registra o idioma canônico, o userLanguage e a cli bilíngue no …",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T10:57:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1a016bee5b9d73ebc1cb16609498cb0047f6a2a",
"body": "- banner recebe a tabela de mensagens injetada (tagline, instalador e créditos);\n a marca Método Governado por Rastreabilidade não se traduz — linha fixa, com\n teste guardando a decisão\n- install com -y e sem flag herda o locale em vez de gravar null no manifesto;\n o backfill pt-BR do update volt\n[…]\n alcançar só manifestos da era sem o campo\n- smoke da CLI fixa o locale no helper de execução (o runner do CI usa locale C\n e a tabela en, o que quebrava os asserts em português) e cobre o help em en",
"is_bot": false,
"headline": "fix: aplica o idioma de saída ao banner e ao install não interativo",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T10:17:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "657fd334375c3c3563e400a7dbb591c49a8d47c0",
"body": "…e saída\n\n- src/messages.js concentra as strings da borda em fonte única; en é o default\n do pacote e qualquer pt-* seleciona a tabela pt-BR\n- precedência resolvida na borda: --user-language > manifesto (project > global)\n > locale; após o TUI, as mensagens finais saem no idioma escolhido\n- pergun\n[…]\nsmo padrão do adaptador\n de prompts; núcleo não lê ambiente nem decide idioma\n- erros lançados pelo núcleo e strings do validator permanecem pt (registrado\n como ajuste futuro no completion da spec)",
"is_bot": false,
"headline": "feat: adiciona tabela de mensagens en/pt-BR à CLI seguindo o idioma d…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T03:22:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bfef9a3e8ab330ed44419ae82871b444f1fa23c7",
"body": "…onfigurável\n\n- traduz skills/, shared/, sdd-check.sh e README para inglês sob protocolo de\n integridade estrutural + gabarito por arquivo (ADR-0003)\n- adiciona userLanguage ao manifesto: pergunta no install com default do locale,\n flag --user-language, backfill pt-BR silencioso no update e exibiç\n[…]\nlity-rules.md\n com limpeza dos nomes legados; template de revisões vira reviews.md\n- adiciona scripts/check-translation.mjs (ferramenta de dev, fora do tarball) e\n README.pt-BR.md com links cruzados",
"is_bot": false,
"headline": "feat: adota o inglês como idioma canônico e torna o idioma de saída c…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T03:03:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09de23727bd99c7d9675b9b91e50dda3548f9ad3",
"body": "O workflow volta a rodar ao empurrar uma tag v* (gates de release + checagem tag==versao) e\nsegue disponivel sob demanda via workflow_dispatch. Continua gates-only: nao publica.\n\nA checagem tag==versao e o unico gate que o ci.yml nao cobre, e roda no instante em que o erro\nseria irreversivel (§5: versao publicada nunca e sobrescrita). Vale o guarda automatico.",
"is_bot": false,
"headline": "ci: reativa o disparo do publish por tag, mantendo o manual",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T13:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "362d219aa0e8cfaa9b44d19e5a4737870a51ce41",
"body": "Minor: as skills diagnosing-bugs e o code-analyzer de dois eixos sao funcionalidade nova que\nvai no pacote (skills/ esta no files). Fecha a secao [Nao lancado] -> [0.4.0] no changelog.\n\nPrep apenas: a tag v0.4.0 e o npm publish (manual, §5) ficam para o momento da publicacao.\nSe a publicacao nao for hoje, ajustar a data 2026-07-15 no changelog.",
"is_bot": false,
"headline": "chore: bump 0.4.0",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T12:07:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1559bd06569c49201a8c65974a28df3c93554115",
"body": "As duas features acrescentam conteudo que VAI no pacote publicado (skills/ esta no files):\na skill diagnosing-bugs e o code-analyzer de dois eixos. Faltavam na secao [Nao lancado] --\nso os gates estavam la, e esses nao mudam o pacote.\n\nSem bump: a versao e tag ficam para a publicacao manual (§5), cobrindo tudo desde a 0.3.8.",
"is_bot": false,
"headline": "docs: registra diagnosing-bugs e o eixo-spec no changelog",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T11:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56e742ec3d4c357101968915887a128e6a96b86c",
"body": "O revisor passa a medir dois eixos independentes, reportados lado a lado: Standards (o codigo\nsegue docs/sdd/09-review-rules.md?) e Spec (o codigo cumpriu a spec de origem?). Fecha a fenda\nentre o que o MGR promete (fidelidade ao plano) e o que ele verificava.\n\nO eixo Spec reprova requisito ausente/\n[…]\nfica inalterado.\n\nModelo de dois eixos adaptado de code-review de Matt Pocock (MIT); o smell baseline dele foi\nrejeitado por violar a §3.1. Sequencial (sem sub-agentes) para preservar a portabilidade.",
"is_bot": false,
"headline": "feat: adiciona o eixo-spec ao code-analyzer",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T04:14:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1646eae68325416c7d7d6c780079d7ebf4363f35",
"body": "Disciplina de diagnostico de bug dificil, adaptada de diagnosing-bugs de Matt Pocock\n(github.com/mattpocock/skills, MIT) para o vocabulario e a CONSTITUTION do MGR. Fecha a unica\nlacuna do fluxo: era onde o agente ainda improvisava, lendo codigo para chutar a causa.\n\nA regra central e sinal antes de\n[…]\nerto nao-trivial vai ao spec-create.\nNao cria branch: recomenda onde o fix aterrissa, com adiar como default.\n\nEntra no CORE (sempre instalada). Zero dependencia; 25 testes verdes; mgr validate verde.",
"is_bot": false,
"headline": "feat: adiciona a skill diagnosing-bugs ao nucleo",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T03:21:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0586c9b1577c38094c2f02f253a1b002853cf34d",
"body": "O workflow deixa de rodar ao empurrar uma tag v* e passa a executar so sob demanda\n(workflow_dispatch). Ele nao publica nada: roda os gates de release e confere que a tag bate com\na versao do package.json.\n\nCom o disparo manual, o run pode apontar para um branch em vez de uma tag, e a checagem\ntag == versao compararia o nome do branch com a versao. Ela agora e pulada quando o ref nao e\numa tag, em vez de falhar com uma mensagem enganosa.",
"is_bot": false,
"headline": "ci: desativa o disparo automatico do publish",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:50:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9878a94b5510e87f01c8e9f8a4772132541a633",
"body": "A v4 dessas actions roda em node20, deprecado nos runners do GitHub, que ja as forcavam a\nexecutar em node24 e emitiam warning. A v5 e o primeiro major das duas que declara\nruns.using: node24.\n\nO breaking change do setup-node v5 (cache automatico quando o package.json declara\npackageManager) nao se aplica: o projeto nao tem esse campo e ja passa cache: npm explicito.",
"is_bot": false,
"headline": "ci: atualiza checkout e setup-node para v5",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:48:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29ae86d829032465e7236d00294751469fdfdd7f",
"body": "Os artefatos SDD sairam do versionamento, entao as referencias a docs/sdd/ e specs/ ficaram\npenduradas: quem clonasse via a decisao, mas nao alcancava a fonte citada.\n\nAs citacoes viram texto autocontido (o racional ja estava no corpo dos ADRs) e as referencias\nrestantes apontam so para arquivos que existem no repositorio. O ADR-0001 ganha o ponteiro para\no ADR-0002, que cumpre o enforcement do INV-2 que ele havia deixado em aberto.",
"is_bot": false,
"headline": "docs: torna os ADRs autocontidos, sem apontar para artefatos locais",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:37:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "993d4bb9feb9b7b3208b3963535bacaba425cf69",
"body": "Os artefatos SDD passam a viver apenas no disco, por decisao do autor. As skills\nspec-create/spec-execute continuam funcionando localmente, pois dependem dos arquivos em\ndisco, nao do versionamento.\n\nOs ADRs (docs/adr/) seguem versionados: sao a decisao publica, nao o rascunho.",
"is_bot": false,
"headline": "chore: remove specs e docs/sdd do versionamento",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a7acdccf35e6004af17d461a0746091f002f383",
"body": "Implementa os quatro gates que a CONSTITUTION listava como [A IMPLEMENTAR]: ESLint (flat\nconfig), commitlint (hook commit-msg via core.hooksPath, sem husky), gate de cobertura\n(--test-coverage-lines=95, flag nativa do Node) e npm audit --audit-level=high no CI.\n\nO lint passa a enforcar dois invarian\n[…]\nra: src/ nunca importa bin/ (INV-2) e\nbin/mgr.cjs preso ao ES5, que e o que garante a mensagem legivel em Node < 22.\n\nNenhuma dependencia de runtime; o pacote publicado nao muda. Decisoes em ADR-0002.",
"is_bot": false,
"headline": "feat: adiciona gates de qualidade que quebram o build",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T14:50:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3759ac8ce250b826189e142f3692587d1ab89e9e",
"body": "Gera docs/sdd/ (00-08, 09-review-rules, _self-assessment), a CONSTITUTION.md\naprovada e o ADR-0001 (arquitetura em camadas: borda bin/ -> nucleo src/, sem\nports/adapters; inversao pontual no Humble Object de src/prompts.js).\n\nRegistra os gates adotados (ESLint, commitlint, gate de cobertura, auditoria de\ndependencias) como [A IMPLEMENTAR] na CONSTITUTION.\n\nIgnora .claude/ (auto-install de dogfooding) e .spec-init/cache/.",
"is_bot": false,
"headline": "docs: inicializa SDD do projeto (spec-init brownfield)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T12:27:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f24e094128549da3cd236901a226cfd645abedd7",
"body": "Coleta de prompts extraida para src/prompts.js (injetavel) e smoke tests dos\ncomandos do CLI; cobertura de linhas de 81.44% para 96.95%.",
"is_bot": false,
"headline": "chore: bump 0.3.8",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T11:59:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fab9f595dbe266a33f49d61e3dbd8fb1c54bb3df",
"body": "O bloco interativo do install vivia inline no bin/mgr.js e nao era testavel\n(exige TTY). Agora a coleta de respostas mora em src/prompts.js e recebe o\nadaptador de prompts injetado (clack no CLI, stub nos testes).\n\nCobertura de linhas: 81.44% -> 96.95%. src/ inteiro a 100% (incluindo o novo\nprompts.js); bin/mgr.js sobe de 72% para 89.7%. Comportamento inalterado.",
"is_bot": false,
"headline": "refactor: extrai a coleta de prompts para src/prompts.js (injetavel)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T11:58:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c89707fc3ade7b039f299d8cd1e94f9c148da8",
"body": "…idate)\n\nO smoke test do 0.3.1 trouxe bin/mgr.js para a medicao (o V8 coverage e\nherdado pelo subprocesso), expondo que os comandos do CLI nao tinham teste.\nCobre version/list/validate/help, dry-run, install, status, update, uninstall,\nbuild e os caminhos de erro.\n\nLinhas: 81.44% -> 89.52%; src/ inteiro a 100%. O restante de bin/mgr.js e o\nTUI interativo (clack), que exige TTY.",
"is_bot": false,
"headline": "test: cobre os comandos do CLI (status, update, uninstall, build, val…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T04:36:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c534b351b66dfbee581d3bfe6bbf0ece6de53290",
"body": "Instala a fonte de qualidade e corrige os caminhos _shared no spec-init\n(fix da secao de qualidade do guia introduzida no 0.3.6).",
"is_bot": false,
"headline": "chore: bump 0.3.7",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7180bb149109f06da24a02a91f7e0aeb91789a87",
"body": "…init\n\nNo modelo autossuficiente (0.3.0+) nao existe .mgr-core/shared; o installEngine\nso copiava _shared/arch. A fonte shared/quality/regras-qualidade.md nao era\ninstalada e o spec-init apontava para .mgr-core/shared/... (inexistente),\nquebrando a montagem da secao de qualidade do guia (0.3.6).\n\n- installEngine copia _shared/quality quando spec-init esta no conjunto.\n- spec-init referencia _shared/arch e _shared/quality (co-locadas nas skills).\n- teste garante a fonte de qualidade instalada.",
"is_bot": false,
"headline": "fix: instala a fonte de qualidade e corrige caminhos _shared no spec-…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:55:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de78cbd1a4e8794b6ec6609be0de224e2877856b",
"body": "spec-execute com fidelidade ao plano e qualidade por linguagem (Effective\nJava + Checkstyle); nova fonte shared/quality/regras-qualidade.md.",
"is_bot": false,
"headline": "chore: bump 0.3.6",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1c321effa86ab078ad5149c0aa44c3bd57e9de8",
"body": "Resolve dois defeitos reais do executor:\n\n- Fidelidade ao plano (trilho): reafirma o artefato exato antes de cada task e\n proibe alterar forma/quantidade/nome por conta propria (o \"1 controller vira\n 4\"). Divergencia real -> parar e voltar ao spec-create.\n- Qualidade e idioma da linguagem aplicado\n[…]\no - JQ-1) + Google Checkstyle;\n demais linguagens [ADAPTADO]. spec-init grava o perfil no guia; code-analyzer cita.\n- Auto-review por task, trilho/buscar-ou-perguntar e economia de tokens explicitos.",
"is_bot": false,
"headline": "feat: spec-execute com fidelidade ao plano e qualidade por linguagem",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:24:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c524c9ed0a8694ee20448e837ed30ce59c825360",
"body": "DTOs e mappers da web sob a versao do controller (isolamento de versao da\nAPI), com regras ArchUnit; opt-in no perfil Hexagonal+Java.",
"is_bot": false,
"headline": "chore: bump 0.3.5",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T15:27:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "625065e2e83dba0eb4d67b0a4b42292354387ac2",
"body": "…sao)\n\nCodifica no perfil Hexagonal+Java (opt-in) que DTOs (...Request/...Response) e\nmappers da web moram sob controller.v* em vez de soltos em adapter.in.web,\nisolando o contrato por versao da API, com regras ArchUnit. Dispensavel em\nAPIs sem versionamento.",
"is_bot": false,
"headline": "feat: dto/mapper da web sob a versao do controller (isolamento de ver…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T15:24:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e18b8da01a80fc25a85f0833ec42fcf8fd8194c0",
"body": "Refino da convencao Hexagonal (perfil Java): command/query, composition\nroot, relacao entre dominios (DDD) e estrutura de adapters mais rica.",
"is_bot": false,
"headline": "chore: bump 0.3.4",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T14:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d249294e99df04723b69ee528a4267dda06f0de7",
"body": "Codifica no perfil Hexagonal+Java os pontos discutidos:\n\n- Command/Query (input data) co-locados com o input port em core..port.in.\n- config como composition root: unico a acessar as impls de use case\n (regra ArchUnit dedicada).\n- Organizacao de pacotes como escolha neutra (por feature x por camada\n[…]\nort; features independentes (slices ArchUnit).\n- Estrutura de adapters mais rica (web/rabbit/persistence/client) com sufixos\n Controller/Receiver/RepositoryAdapter/ApiAdapter. Regras usam ..core..X..",
"is_bot": false,
"headline": "feat: refina convencao hexagonal (command/query, composition root, DDD)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T14:29:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6f07403f7d65366a1431fb262085f634126b8ca",
"body": "Governanca do enforcement de arquitetura + convencao/ruleset ArchUnit do\nperfil Hexagonal+Java, e nota de enforcement nas demais arquiteturas.",
"is_bot": false,
"headline": "chore: bump 0.3.3",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T02:35:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19d5148285d8aded4a452b618a305fcd24a4047f",
"body": "O CHANGELOG estava parado no 0.1.0 e listava os guias de arquitetura como\nplanejado/stubs, contradizendo o README. Repoe as entradas 0.1.1-0.3.2 com\ndatas reais de publicacao e registra que arch-clean/onion/layered viraram\ncanonicas no 0.2.0 (sem reescrever a entrada historica do 0.1.0).",
"is_bot": false,
"headline": "docs: atualiza CHANGELOG (0.1.1-0.3.2 e tira arch guides de planejado)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T02:33:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dfba59afd2c41191a47f1b60b16363d2533bd37",
"body": "Absorve as boas ideias da archunit-guard sem prende-las a hexagonal:\n\n- Governanca do enforcement (agnostica) nas Boas Praticas transversais:\n arch-lint e guard-rail, nunca enfraquecer, drift corrige o codigo, mudanca\n de regra so via adr-create, sem excecoes; traduzir os INV para a ferramenta\n d\n[…]\nase/...Adapter, estrutura interna do adapter) e o\n ruleset ArchUnit concreto.\n- arch-clean/onion/layered ganham a nota de Enforcement (traduzir INV para a\n ferramenta do perfil), marcada [ADAPTADO].",
"is_bot": false,
"headline": "feat: codifica governanca do enforcement e convencao hexagonal",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T02:25:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7d4447b5d88fe49df9953e11e9e2416c14d9f4e",
"body": "Guard de versao do Node no CLI: em Node < 22 mostra mensagem clara em vez de\ncrash minificado.",
"is_bot": false,
"headline": "chore: bump 0.3.2",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "587ab85abb210bfdd04c370dfb69a1d9ff5ef76b",
"body": "Adiciona um launcher CJS (bin/mgr.cjs, ES5) como bin do pacote: valida\nprocess.versions.node >= 22 antes de carregar o bundle ESM e, se for menor,\nimprime uma mensagem clara e sai, em vez do crash minificado. O bin passa a\napontar para o launcher, que e incluido em files.",
"is_bot": false,
"headline": "feat: guard de versao do Node no CLI (mensagem clara em Node < 22)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T17:09:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56db7b286b06555525df79f5f51e2504544f5f7b",
"body": "… stubs)\n\nAs skills de arquitetura ja sao canonicas (Clean/Martin, Onion/Palermo,\nLayered/Fowler) e agnosticas a linguagem; a tabela ainda as descrevia como\nstubs [A DEFINIR]. Atualiza tambem a linha da hexagonal (nao e mais so Java).",
"is_bot": false,
"headline": "docs: corrige tabela de skills (arch-clean/onion/layered nao sao mais…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T16:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ea4727e12eabcd29a57ff8d97adb21b9628a076",
"body": "Corrige crash \"find is not a function\" no install quando ha instalacao\nanterior detectada (regressao do 0.3.0).",
"is_bot": false,
"headline": "chore: bump 0.3.1",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:56:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2979145c8087ab4a0015b10cdcf4f5c81cffdb22",
"body": "detectPrior passou a retornar o objeto do manifesto (ou null) em vez de uma\nlista, mas cmdInstall ainda chamava prior.find(...), quebrando com \"find is\nnot a function\" quando havia instalacao previa. Usa prior.model diretamente e\nadiciona um smoke test do CLI que exercita esse caminho.",
"is_bot": false,
"headline": "fix: install nao quebra com instalacao anterior detectada",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:55:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50a3c50d2149f2ed412e88f6b2c6c0fffe48e2b1",
"body": "Instalacao seletiva e autossuficiente por motor: skills direto na pasta do\nmotor (sem .mgr-core/skills nem lancadores). O .mgr-core vira config do\nprojeto (manifest.json + .env com MGR_PROJECT_ID, usado pelo mgr-code).\nMigracao automatica do modelo antigo no install/update.",
"is_bot": false,
"headline": "chore: bump 0.3.0",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:39:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30a2053726acfbc2b0638c50643fa933efc3178c",
"body": "Cobre detect, installs/detectPrior, os throws de update/uninstall sem\ninstalacao e a resolucao do token via --skills-dir com arch. Linha e funcoes\na 100%.",
"is_bot": false,
"headline": "test: recompoe cobertura do instalador (detect, installs, ciclo de vida)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:36:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a35bd16a60ff569f6ee04b6a6eea7a24ed74e07",
"body": "Reescreve a secao de Instalacao: o install agora e seletivo (pergunta\nlinguagem, arquitetura e MGR_PROJECT_ID) e copia so as skills usadas. Cada\nmotor e autossuficiente (skills direto na pasta do motor, sem duplicacao) e o\n.mgr-core guarda apenas config (manifest.json + .env). Documenta a migracao\nautomatica do modelo antigo e as novas flags.",
"is_bot": false,
"headline": "docs: atualiza README e help para o install seletivo e .mgr-core config",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:36:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b58f01edc9446063f50f9cc85a1b8c0bdea5ce",
"body": "O .mgr-core deixa de guardar skills e passa a conter apenas config: o\nmanifest.json e um .env com MGR_PROJECT_ID, consumido pela memoria estendida\n(mgr-code). As skills seguem apenas na pasta do motor, sem duplicacao.\n\nO manifesto volta a ser project-level e a migracao do modelo antigo mantem o\n.mgr-core (remove so o conteudo duplicado) em vez de apaga-lo. Inclui a\npergunta interativa e a flag --project-id.",
"is_bot": false,
"headline": "refactor: .mgr-core como config do projeto (manifest + .env)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:30:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b84209279c188eceb387790f54455a8045373a32",
"body": "…iclo de vida)",
"is_bot": false,
"headline": "test: cobre o novo instalador (selecao, autossuficiencia, migracao, c…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T10:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e3a85b6804acb51da98707d5e6a86beaca517ee",
"body": "Substitui o modelo runtime + lancadores (.mgr-core + apontadores) por um\nmodelo autossuficiente: o conteudo completo das skills SELECIONADAS vai\ndireto para a pasta do motor (.claude/skills ou .github/skills), com um\nmanifesto proprio. Cada motor e independente e pode ser removido sem\nafetar o outro\n[…]\ngracao automatica de instalacoes antigas (runtime-launcher): remove\n .mgr-core e lancadores e reinstala no novo layout.\n- flags --language/--arch/--all-skills; status/update/uninstall no novo modelo.",
"is_bot": false,
"headline": "feat: instalacao seletiva e autossuficiente por motor",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T10:53:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6e19b3f62c1b4f53e291e05a47abeea256fa546",
"body": null,
"is_bot": false,
"headline": "chore: bump 0.2.0 (engines >=22 + skills de arquitetura completas)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:21:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62636d748fc5d4d54644c756cffde982f38d414b",
"body": null,
"is_bot": false,
"headline": "docs(spec-init): documenta montagem do guia via fonte transversal unica",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7eb51c6f9fbf277e387692f657c06c871a7ef54",
"body": "Deixa de ser stub: guia da arquitetura em camadas (Fowler, PoEAA) com\nPrincipios top-down (Presentation/Domain/Data Source), Anti-patterns e\nChecklist proprios. Marca na fonte transversal que os Anti-patterns/\nChecklist/enforcement de inversao sao da familia hexagonal/clean/onion;\nlayered usa os seus. Fecha a padronizacao das 4 skills de arquitetura.",
"is_bot": false,
"headline": "feat: arch-layered canonica (Fowler) no template padrao",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0640eb275744364583f95925a18ffc876b239132",
"body": "Deixa de ser stub: guia completo da Onion Architecture (Jeffrey Palermo,\n2008) no template comum (Objetivo, Fundamentacao, Principios/INV com os 4\ntenets, Anti-patterns, Referencias), incluindo a fonte transversal unica.",
"is_bot": false,
"headline": "feat: arch-onion canonica (Palermo) no template padrao",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:09:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ce841f597b2496e7fd6864e98180ae53d548b1e",
"body": "- Cria shared/arch/regras-transversais.md como fonte unica das regras\n transversais (design, testes, logs, mutation, perfis de linguagem,\n boas praticas opt-in, anti-patterns transversais e checklist).\n- arch-clean deixa de ser stub: guia canonico completo (Robert C. Martin)\n no template padrao (\n[…]\n Referencias), incluindo a fonte transversal.\n- arch-hexagonal migra para o mesmo template, movendo as transversais para\n a fonte unica (nada perdido). Template comum entre as skills de arquitetura.",
"is_bot": false,
"headline": "refactor: padroniza skills de arquitetura com fonte transversal unica",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:03:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37ddfb9b677ff005992cee97ef3d130868fe8781",
"body": "Reestrutura em invariantes universais + design OO + testes/logs/mutation\n+ perfis por linguagem (Java validado; Go, Python, C#, TypeScript/Node\nadaptados; generico) + guard-rails da IA, com IDs citaveis pelo\ncode-analyzer. Preserva as premissas do autor: mantem racional do mutation,\nos complementos opcionais (ArchUnit e nomenclatura como opt-in, \"oferecer\nnao impor\") e todas as regras validadas originais.",
"is_bot": false,
"headline": "refactor: arch-hexagonal agnostica com perfis por linguagem",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T02:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78e1ff52fe6ecb2344724ababc6ac5d924cec23a",
"body": null,
"is_bot": false,
"headline": "chore: engines node >=22 (alinha com o LTS testado no CI)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T16:47:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98dd68485de9277c2fcf950cf9c09079b007189e",
"body": "Adiciona testes para installer (detect, detectPrior, --skills-dir, update\ncustom, motor invalido), bundle (pkgDir/sharedDir/readVersion), builder\n(buildSkill ausente) e validator. Refatora validator extraindo checkSkill\n(logica pura, sem IO) para permitir testar as ramificacoes de validacao.",
"is_bot": false,
"headline": "test: cobertura de linhas e funcoes a 100%",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b904d9c96e189122367d8c442b981cbe462f47ca",
"body": null,
"is_bot": false,
"headline": "docs: usar npx mgr-method@latest na instalacao",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfb5a80d8e554eed29c7163e5e63b744436cdc6c",
"body": null,
"is_bot": false,
"headline": "docs: remove badge de downloads (pacote novo, sem dados)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:24:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a2cd678f0baf07dfd5cd3064896e073c6135df3",
"body": null,
"is_bot": false,
"headline": "ci: nao falhar o build se o upload ao Coveralls der erro",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0445c5ee495c883242807f836992e51d5b8e0029",
"body": "…o README",
"is_bot": false,
"headline": "docs: adiciona badges (CI, coverage, npm, node, downloads, license) n…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d198eb601b3c1e0736372d2fd7ab01129b367429",
"body": "Adiciona script coverage (node:test com reporter lcov, exclui test/**),\nenvia o lcov ao Coveralls no CI e passa os workflows para node-version\nlts/*. Ignora lcov.info, coverage/ e exemplos/.",
"is_bot": false,
"headline": "ci: cobertura de testes via Coveralls e Node LTS",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f98cb2e590175881cb1b06cd05a4218cb261397",
"body": "Remove auto-publish do CI: OIDC (npm/cli#8730) e granular token bypass_2fa\n(npm/cli#8869) estao quebrados no npm. Workflow agora roda so os gates de\nqualidade na tag e documenta o comando de publish manual (recovery code).",
"is_bot": false,
"headline": "ci: publish manual (gates-only) ate npm corrigir OIDC/token",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T01:29:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "591dbb00d4e0b6d7c75a34dc26ee13d5f934176f",
"body": "Espelha o setup de referencia (nklisch/express-route-parser): Node 24\ntraz npm >=11.5.1 nativo, mantem registry-url. Testa se o OIDC token\nexchange passa agora que o metadado repository.url do pacote foi\ncorrigido para maurigre pela publicacao manual do 0.1.2.",
"is_bot": false,
"headline": "test: volta ao OIDC (Node 24 + registry-url) e bump 0.1.3",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T01:24:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98971f75682a04e3ae9fc24d5b647b2e93b6a739",
"body": "OIDC trusted publishing falha com \"package not found\" no token exchange\nmesmo com config correta (bug npm/cli#8730). Fallback confiavel via\nNODE_AUTH_TOKEN + secret NPM_TOKEN. Provenance mantida.",
"is_bot": false,
"headline": "fix: publica via Automation token (NPM_TOKEN) em vez de OIDC",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T00:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b6d401ea2c3345f75c68a44dcc428aabc7e6aad",
"body": null,
"is_bot": false,
"headline": "chore: diagnostico OIDC verbose no publish",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:54:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37336afa8776cae19bc53f18b9c432d9a910a680",
"body": "O registry-url no setup-node grava um .npmrc temporario com linha de\n_authToken, o que faz o npm ignorar o OIDC (E404/ENEEDAUTH). Removendo,\no npm >=11.5.1 com id-token:write autentica via OIDC automaticamente.",
"is_bot": false,
"headline": "fix: remove registry-url para o OIDC de Trusted Publishing funcionar",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c5298c879a318119d4c7bf2a3de1acad8a61f60",
"body": "setup-node deixa o .npmrc com _authToken invalido quando nao ha token,\no que fazia o npm ignorar o OIDC e retornar E404. Zerar NODE_AUTH_TOKEN\nforca o fallback correto para Trusted Publishing.",
"is_bot": false,
"headline": "fix: zera NODE_AUTH_TOKEN no publish para OIDC funcionar",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:49:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eceb2e02ba95d340d36601e75ef0e76dc36ba5cc",
"body": "- Atualiza npm para >=11.5.1 no workflow (Trusted Publishing exige)\n- Remove token/NODE_AUTH_TOKEN: auth via OIDC (Trusted Publisher)\n- Provenance passa a ser automatica",
"is_bot": false,
"headline": "chore: bump 0.1.2 e corrige publish via OIDC",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a81d95cb55dd9f34fca8eaf90c505ebc5e67f24a",
"body": "Updated author and repository details in package.json.",
"is_bot": false,
"headline": "Update author and repository information",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:26:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ff13d2e0b790b6b97bcf9776671bb436d3d0661",
"body": "Updated Node.js version from 20 to 22 and modified package version check to use jq.",
"is_bot": false,
"headline": "Update Node.js version and package version check",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:24:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b01f3952f8a08b15448ee50ad7e7d8ab5b5f376a",
"body": null,
"is_bot": false,
"headline": "0.1.1",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:47:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebfd4b437ec9d59cbc6c1a9d054b515cd647ea41",
"body": "feat: added publishing routine",
"is_bot": false,
"headline": "Merge pull request #2 from maurigre/adds_publishing_routine",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39c6a5bad8f0502cca636e18f02914d54dbad2df",
"body": null,
"is_bot": false,
"headline": "feat: removed space in banner",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a5fb1c85dc63f48b457acb028ecedffbdbd0828",
"body": null,
"is_bot": false,
"headline": "feat: added publishing routine",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:37:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79101aa582b7ebf494e8b63a22414fad32ce4882",
"body": "feat: added evidence capture for chanllenge",
"is_bot": false,
"headline": "Merge pull request #1 from maurigre/add_evidence_capture_for_challenge",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T15:41:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22231d2eac252df9fa4cb4daa2183a62f045a17d",
"body": null,
"is_bot": false,
"headline": "feat: added evidence capture for chanllenge",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T15:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a6671296dbf5d21ba6727809058613149d00c4e",
"body": null,
"is_bot": false,
"headline": "feat: base initial version",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-04T19:39:45Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 15,
"commits_last_year": 71,
"latest_release_at": "2026-07-17T11:27:31Z",
"latest_release_tag": "v0.5.0",
"releases_from_tags": true,
"days_since_last_push": 1,
"active_weeks_last_year": 3,
"days_since_latest_release": 5,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mgr-method",
"exists": true,
"license": "SEE LICENSE IN LICENSE",
"keywords": [
"spec-driven-development",
"sdd",
"agent-skills",
"claude-code",
"github-copilot",
"coding-agents",
"ai-agents",
"adr",
"architecture-decision-records",
"code-review",
"developer-tools",
"cli",
"hexagonal"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/mgr-method",
"is_deprecated": false,
"latest_version": "0.5.0",
"repository_url": "https://github.com/maurigre/mgr-method",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2314,
"first_published_at": "2026-07-05T18:29:06.035000Z",
"latest_published_at": "2026-07-17T11:46:39.857000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 22188,
"source_files_sampled": 15,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@clack/prompts",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.0"
},
{
"name": "picocolors",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 6,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "maurigre",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/8541648?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/22 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 5,
"reason": "dependency not pinned by hash detected -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "709491e8a00442cb61d945bcab8ea7da06b43e2a",
"ran_at": "2026-07-22T11:54:52Z",
"aggregate_score": 3.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T11:30:32Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T10:58:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/maurigre/mgr-method",
"host": "github.com",
"name": "mgr-method",
"owner": "maurigre"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 33,
"vitality": 68,
"community": 37,
"governance": 54,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 68,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 71,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "71 commits in the last year",
"points": 16.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 71
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v0.5.0",
"releases_from_tags": true,
"days_since_latest_release": 5,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 37,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"mgr-method"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2314
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,314 downloads/month across npm",
"points": 44.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2314,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 6,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "6/6 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 6,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"followers": 15,
"owner_type": "User",
"is_verified": null,
"owner_login": "maurigre",
"public_repos": 46,
"account_age_days": 4349
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of maurigre",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "maurigre"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "46 public repos, account ~11 yr old",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 46
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"mgr-method"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "14 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 14
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"agent-skills",
"ai-agents",
"architecture-decision-records",
"claude-code",
"cli",
"code-review",
"coding-agents",
"developer-tools",
"github-copilot",
"nodejs",
"sdd",
"spec-driven-development",
"specification"
],
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/mgr-method",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/mgr-method",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 33,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 2.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 46,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.972,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "69 of 71 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 69,
"sampled": 71
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 71",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 71
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 22188,
"source_files_sampled": 15,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/15 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 15,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:mgr-method@0.5.0; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-22T11:55:00.570047Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/maurigre/mgr-method.svg",
"full_name": "maurigre/mgr-method",
"license_state": "custom",
"license_spdx": null
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.26.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — npm.