Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-23 13:48 UTC

millionco / openstory

Storybook for Agents

TypeScriptMIT★ 16 Sterne⑂ 2 Forksseit Mai 2026Auf GitHub ansehen ↗

millionco/openstory erreicht einen Gesundheitsindex von 49 von 100 und liegt damit im Bereich Gefährdet. Am stärksten schneidet es bei AI Readiness (73/100) ab, am schwächsten bei Security (23/100). Zuletzt vor 5 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

49
gesamt / 100
Gefährdet

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

49
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

405 Follower32 öffentliche Reposseit Mai 2021

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlichtTags
npmopenstory0.1.02.89117vor 5 Tagencomponentscsfreactsolidstoriesstorybookuivite

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

66Mittel · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 5 Tagen
2.8/36Commit-Rhythmus — 4/52 Wochen mit Commits
15.5/18Commit-Volumen — 52 Commits im letzten Jahr
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Verwendete Eingangsdaten
commits_last_year52
human_commit_share0,981
days_since_last_push5
active_weeks_last_year4
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 1 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 5 Tagen
12.6/27Release-Rhythmus — Rhythmus unbekannt (nur ein Release)
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count1
latest_release_tagopenstory@0.1.0
releases_from_tagsnein
days_since_latest_release5
mean_days_between_releases
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

47Gefährdet · 18 % des Gesamtindex
Wie die Bewertung erfolgt
19.1/60Stars — 16 Stars
0/25Forks — 2 Forks
0/15Watcher — 0 Watcher
Verwendete Eingangsdaten
forks2
stars16
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (MIT)
18/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein
Wie die Bewertung erfolgt
46.1/80Downloads pro Monat — 2.891 Downloads/Monat über npm
0/20Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen
Verwendete Eingangsdaten
packagesopenstory
dependents
ecosystemsnpm
total_downloads
monthly_downloads2.891
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

54Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
4.4/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 80 % der Commits
5.4/13.5Breite der Beitragenden — 4 Beitragende
3/10OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3
Verwendete Eingangsdaten
bus_factor1
contributors_sampled4
top_contributor_share0,804
Wie die Bewertung erfolgt
0/46.8Issue-Lösungsquote — 0 % der Issues geschlossen
38.2/38.3PR-Annahme — 5/5 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 1/26 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs5
open_issues1
closed_issues0
issue_closed_ratio0
closed_unmerged_prs0
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
18.8/25Reichweite des Inhabers — 405 Follower von millionco
21.3/25Kontohistorie — 32 öffentliche Repos, Kontoalter ca. 5 Jahre
Verwendete Eingangsdaten
followers405
owner_typeOrganization
is_verified
owner_loginmillionco
public_repos32
account_age_days1.879

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf npm
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 5 Tagen
20/20Versionshistorie — 17 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesopenstory
ecosystemsnpm
any_deprecatednein
min_days_since_publish5

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

48Gefährdet · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 5 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
6/20OpenSSF Scorecard: CI-Tests — 1 out of 3 merged PRs checked by a CI test -- score normalized to 3
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein

Dokumentation

40Gefährdet
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
0/10Topics
0/10Wiki
Verwendete Eingangsdaten
topics
has_wikinein
homepage
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

23Kritisch · 16 % des Gesamtindex

Sicherheitslage

23Kritisch
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0.8/2.5CI-Tests — 1 out of 3 merged PRs checked by a CI test -- score normalized to 3
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/26 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — keine Daten
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 18 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate2,3
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

73Gut · 0 % des Gesamtindex
Wie die Bewertung erfolgt
45/45Agentenanweisungen — AGENTS.md, CLAUDE.md
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 44 von 51 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,863
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes2.340
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — apps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json
10/10Reproduzierbare Umgebung — lockfile
10/10Belegte Agentenpraxis — 22 der letzten 52 Commits von Agenten verfasst oder ihnen zugeschrieben
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilespnpm-lock.yaml
has_dockerfilenein
typed_languageja
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configsapps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json
agent_commit_share0,423
toolchain_manifests
dependency_bot_commit_share0
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — TypeScript (statisch typisiert)
55/55Handhabbare Dateigrößen — 0/135 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageTypeScript
largest_source_bytes56.023
source_files_sampled135
oversized_source_files0

Eckdaten

16GitHub-Sterne
4Mitwirkende
52Commits, letzte 12 Monate
5Tage seit letztem Push
1Releases
1Bus-Faktor
1offene Issues
npmPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
  • deps.dev does not index npm:openstory@0.1.0; advisories assessed against the repository dependency graph instead

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 2 ⇿
0Sterne
2Forks

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

111222212026-062026-062026-07
OpenSSF Scorecard 2.3 / 10
2.3Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-23 13:48 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
3CI-Tests1 out of 3 merged PRs checked by a CI test -- score normalized to 3
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/26 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
k. A.Packagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities18 existing vulnerabilities detected
Direkte Abhängigkeiten 6
RegistryPaketVersionsvorgabeManifest
npmnext^15.3.2apps/website/package.json
npmreact^19.1.0apps/website/package.json
npmreact-dom^19.1.0apps/website/package.json
npmcommander^14.0.3packages/openstory/package.json
npmfast-glob^3.3.2packages/openstory/package.json
npmoxc-parser^0.108.0packages/openstory/package.json
Alle Abhängigkeiten nicht erhoben

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 6796,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "CSS": 3544,
        "HTML": 294,
        "Svelte": 162,
        "JavaScript": 4216,
        "TypeScript": 463160
      },
      "pushed_at": "2026-07-18T05:48:27Z",
      "created_at": "2026-05-20T21:25:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-18T05:47:10Z",
      "description": "Storybook for Agents",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://million.dev",
      "name": "Million Software, Inc.",
      "type": "Organization",
      "login": "millionco",
      "company": null,
      "location": "United States of America",
      "followers": 405,
      "avatar_url": "https://avatars.githubusercontent.com/u/85101781?v=4",
      "created_at": "2021-05-31T08:10:52Z",
      "is_verified": null,
      "public_repos": 32,
      "account_age_days": 1879
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "openstory@0.1.0",
          "kind": "other",
          "published_at": "2026-07-18T05:48:28Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "0a0f5a73691ebd22acad58f588a4b228ad50d219",
          "body": "chore: version packages",
          "is_bot": false,
          "headline": "Merge pull request #6 from millionco/changeset-release/main",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-07-18T05:47:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bb0d1b1ae921e1c74c199358cd42d07fd84c187",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T05:46:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b605a4defe201d9f25a5a9bcf6460310f55e283",
          "body": null,
          "is_bot": false,
          "headline": "ci: automate package publishing",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-07-18T05:46:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1298281aa86167643bc098cd149216a94f465e8",
          "body": "feat: add Foldkit framework adapter",
          "is_bot": false,
          "headline": "Merge pull request #4 from binarytide/codex/foldkit-adapter",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-07-18T05:42:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f74312efb472f359144368c5c406ea08cf4d5c9",
          "body": "fix(openstory): keep centered portal stories stable",
          "is_bot": false,
          "headline": "Merge pull request #5 from millionco/fix/centered-layout-portals",
          "author_name": "Ben MacLaurin",
          "author_login": "ben-million",
          "committed_at": "2026-07-18T04:31:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abf7e1e8553362a355a39a7aa3c672b874cc3f66",
          "body": null,
          "is_bot": false,
          "headline": "fix(openstory): keep centered portal stories stable",
          "author_name": "ben-million",
          "author_login": "ben-million",
          "committed_at": "2026-07-18T04:25:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ee81cd15948ac5b110666c1ab62008c3927b2a8",
          "body": "Note: the branch name predates my read of the contributing guide's feat/... branch naming example; apologies for not following that prescribed format from the start.",
          "is_bot": false,
          "headline": "feat: add Foldkit framework adapter",
          "author_name": "John McAndrews",
          "author_login": "binarytide",
          "committed_at": "2026-06-18T01:25:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9937de8e7f69a067ad7ebc1cd1c50c440d52c49b",
          "body": null,
          "is_bot": false,
          "headline": "0.0.15",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-23T00:49:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "375337dce4366774e3d663ab8454ae61b9152543",
          "body": "`openstory dev`/`build` previously set `configFile: false` (since 0.0.12)\nto avoid double-registering the plugin when the user also had it in\ntheir own vite.config.ts. That side-effected projects with non-trivial\ncustom config (react-grab's solid + react exclude regex, define, jsx\noverrides; or anyo\n[…]\n5 stories HTTP 200 zero errors;\n    .react.tsx files compile as React (proving solid({exclude}) honored)\n  - scissors: 5/5 stories HTTP 200 zero errors\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): honor user's vite.config.ts in dev/build + de-dup plugin",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:47:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "88e94daad2aa7c5a187f4f668a15aefbd70d6280",
          "body": "Five issues uncovered during deep audit:\n\n1. Plugin config hook defaulted to \"react\" framework when not explicitly\n   set. A vue/solid/svelte project would get react optimizeDeps + dedupe\n   injected. Added `detectFrameworkSyncOrFallback` and use it from the\n   config hook so detection happens for r\n[…]\nupdate-before-mount-resolved race\n     - framework-detection: sync detector + fallback semantics\n\nNet: 243 tests (was 232), 213 lines added, 16 removed.\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): deep audit — framework default, mount race, dist bloat",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:35:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "866c461a3c5b835011bf743a0eb6dd72814dbdc1",
          "body": "Previously the optimizeDeps include + react dedupe were only added by\n`openstory dev`'s inline vite config, so projects that run `vite`\ndirectly with `openstory/plugin` hit a cold un-prebundled\n`react-dom/client` (its dynamic import from the react adapter dodged\nvite's import crawler) and got a CJS \n[…]\n` hook. Now any vite\nsetup that uses `openstory/plugin` — `openstory dev`, plain `vite`,\ncustom config — gets the prebundling and dedupe automatically.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): inject optimizeDeps + dedupe via plugin config hook",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:28:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11428e47fc5ba1d9ca895f3068b5d6d8f346a43f",
          "body": "…ite config\n\nThe react adapter dynamically imports `react-dom/client`. Vite's\noptimizer doesn't crawl dynamic imports, so the import hit a cold CJS\nshim whose default export had no `createRoot`. Pre-include\n`react`, `react-dom`, and `react-dom/client` in `optimizeDeps` and\nre-add `resolve.dedupe` for the react framework so symlinked /\nhoisted-twice React installs don't trigger hook-rule violations.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): prebundle react-dom/client + dedupe react in inline v…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:21:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "091a698903f3f469cb062e7e0d9f08807cd37d3a",
          "body": null,
          "is_bot": false,
          "headline": "0.013",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d58ee0226abf565b2e0f45181f236351ad43b4a",
          "body": "…ctions\n\nThe react adapter invoked `render(args, context)` directly, so any hooks\ncalled inside `render` ran outside a React fiber and threw \"Invalid hook\ncall\". Wrap each story in a stable `StoryRenderHost` function component\nthat calls `render(args, context)` from its body — matches Storybook's\nbehavior and lets `render: () => { const [x] = useState(); return <Demo\nx={x} />; }` work as written.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory/react): support hooks called directly inside render fun…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:15:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6e2a37fd71c6198daad0046c61a7e26d529dfd33",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: sync root README with package README (drop init/setup refs)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:48:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5a93e390482c9fa800f9437fe80d56b133575dcc",
          "body": "…te config\n\n`openstory setup` and `openstory init` are gone. So are the scaffolding\nutilities (`render-setup-files`, `install-missing-peer-deps`,\n`detect-project-features`). The README lists the install line per\nframework instead.\n\n`openstory dev` and `openstory build` now synthesize the Vite config\n[…]\ny/plugin` from the user's\n`vite.config.ts` — that was the source of the recurring\n`Missing field 'moduleType'` error.\n\nNet: 940 lines removed, 67 added.\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "refactor(openstory): drop setup/init, run dev/build with in-memory vi…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:47:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c6ab5e4ec0fcc5d4bfe5dd14c22a611751ccef52",
          "body": "… find lockfile)\n\nSubpackages in pnpm/yarn/bun workspaces don't carry their own lockfile —\nthe lockfile + `packageManager` field live at the workspace root.\n`detectPackageManager` only looked at the project directory, so an\n`apps/web` package in a pnpm workspace fell through to npm. Running\n`npm ins\n[…]\npackageManager` field, falling back to `npm` only if nothing\nmatches all the way to the filesystem root. Pnpm projects now correctly\nuse `pnpm add -D`.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): detect monorepo workspace package manager (walk up to…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:14:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f9ed9b58ba77568bc6913189a5e9a70871b9732b",
          "body": "… install failures\n\nTwo related fixes for `openstory setup` in real-world monorepos:\n\n1. `detectProjectFeatures` now checks `require.resolve(name)` from the\n   project root in addition to scanning `package.json`. Previously a\n   monorepo project that had `vite` or `@vitejs/plugin-react` installed\n  \n[…]\nely (or accept the transitive dep) without\n   re-running `openstory setup --force`.\n\nBump 0.0.8 → 0.0.9 so the fix can ship via `npx openstory@latest`.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): setup detects already-resolvable peer deps + survives…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:08:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "746825c2e0673285e7be9571bcd108d2c955516d",
          "body": null,
          "is_bot": false,
          "headline": "0.0.9",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:05:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2f21e4cd1657660400c09f2da017f713367757a",
          "body": "… hook (Rolldown / vite 8 compat)\n\nThe plugin's `load` hook for the openstory virtual story entry was\nreturning a bare source string. Rollup-based vite (≤7) accepts that and\ninfers the module type from the resolved id. Rolldown-based vite (8+)\nrequires the load result to be either a string OR an obj\n[…]\ne load hook (the synthesized\nentry is plain ESM with `import` + `boot(...)`, no JSX). Rollup-based\nvite ignores the extra field; Rolldown is now happy.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): return `moduleType` from the virtual story entry load…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T08:38:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d468558451caead5fd552d43665d13f982b2cd16",
          "body": "Single command replaces the manual sequence of:\n  pnpm add -D vite @vitejs/plugin-react\n  pnpm exec openstory init   # scaffold preview + vite.config\n  # hand-edit vite.config for tsconfig aliases + react dedupe + next/navigation\n  # hand-edit preview for globals.css, polyfills, provider decorators\n\n[…]\n Playwright-based verification step: keeps the dep\nsurface minimal and lets the user / their agent run `openstory dev` and\niterate from console output.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): add `openstory setup` for zero-config project bootstrap",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T08:36:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "83c273e28baa7600e4055895af52bb8b2791e242",
          "body": "Static `import * as storyModule` in the generated virtual entry could\nthrow at module-evaluation time (e.g. t3-env's server-side-var validator\nfiring on a transitively imported `*.server.ts` file). Such errors\nescaped any try/catch and the iframe rendered empty.\n\nConvert the story-module import (and\n[…]\nc panel the React `StoryErrorBoundary` already shows for\nrender-time crashes, so both classes of failure are visible and don't\nbreak iframe navigation.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): surface story module-load errors in the iframe",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T08:24:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2be5cba4645abbab6394aa1da7106d95d602627b",
          "body": "- Shell page (`/`) sets `document.title = manifest.projectName` once the\n  manifest loads (e.g. \"same-next\", \"paper\") instead of the static\n  \"Openstory\".\n- Per-story iframe HTML (both dev `renderStoryIframeHtml` and\n  `openstory build`'s `renderStoryHtmlForBuild`) now reads the project name\n  from \n[…]\nnifest and renders `<story-id> · <project name>` in `<title>`,\n  with a clean fallback to `<story-id> · Openstory` when no project name\n  is available.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): use the consumer's project name as document.title",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:53:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fae7fa4b1d3ca34016547080ee8fdbc15d92c574",
          "body": "… story error boundary\n\nPer-story scan across same + scissors caught five systematic crash patterns.\nEach is fixed at the generator or renderer layer.\n\n- Classify generic collection type references properly: `Array<T>`,\n  `ReadonlyArray<T>`, `Iterable<T>`, `ArrayLike<T>`, `Set<T>`, `ReadonlySet<T>`\n\n[…]\nis the single biggest UX improvement when iterating across an\n  auto-generated story set — one broken component can no longer brick\n  the whole iframe.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): collection types, alias components, ref placeholders,…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:47:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "68ada78496265470a9a8c3f9c2a3745163b22103",
          "body": "…date-named props\n\n- Add optional `defaultRender(component)` hook to `OpenstoryRenderer`. Boot's\n  `pickRenderFunction` now uses it whenever neither the story nor the meta\n  defines a `render`. The React adapter implements it as\n  `(args) => createElement(component, args)`.\n\n  Previously the boot re\n[…]\nestamp`, or `time` now default to an ISO 8601 string so `new Date(value)`\n  and `date-fns` helpers don't throw \"Invalid time value\" on default stories.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): renderer.defaultRender + date placeholder for opaque …",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:37:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f078513b223e1ebfac063269452cc2c928a7008d",
          "body": "…ts, sync version from package.json\n\n- React adapter wraps `() => Component` (boot's default-render fallback) with\n  `createElement(component, args)` so `export const Default: Story = {}` no\n  longer throws \"Functions are not valid as a React child\".\n- Required `array` props now default to `[]` and \n[…]\nlks up from\n  `import.meta.url`). The CLI `--version` flag and manifest `openstoryVersion`\n  now stay in sync with the published package automatically.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): render bare components, default required arrays/objec…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:17:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e861ba36813ece52b976c9609ccf72c54da17ad4",
          "body": null,
          "is_bot": false,
          "headline": "0.0.7",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:07:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90a36fe5a196c3c586b566b95de3fdf665a2b2bc",
          "body": "…lding\n\nWalks oxc-parsed TSX with full type resolution (cross-file imports,\ntsconfig path aliases with `extends` chains, interface heritage,\nintersections, discriminated unions of object types, `Partial`/`Required`/\n`Readonly`/`Pick`/`Omit`, `React.FC<P>`, `forwardRef<_, P>`, cva\n`VariantProps<typeo\n[…]\nagainst ~500 OSS React repos from\nreact-doctor-evals — 32k+ generated story files, 40k+ stories, 100%\nparse success through openstory's own CSF parser.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): add `generate` command for static CSF 3 story scaffo…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:02:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "60c1131ba4a41270f68eebe96279937de4139a47",
          "body": "Resolve display title from package.json name (or directory basename) and\nexpose projectName/projectRoot on the manifest for the top bar.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): show project name in shell from package.json",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T03:46:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e552af8bf26c329cf0860f066cc8a754bff09ef0",
          "body": null,
          "is_bot": false,
          "headline": "0.0.6",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T02:37:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "282208510f8919d1d2cc7b0448cbac40ea6992b6",
          "body": "…8923\n\nfeat(openstory): synthesize stories from components (`--components` flag, no files on disk)",
          "is_bot": false,
          "headline": "Merge pull request #3 from millionco/cursor/add-auto-stories-command-…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T02:36:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10597b9970a7f57e3ab6e723f82f48d423f572c4",
          "body": "Each subcommand is now declared with its own options, defaults, and\ndescription, so `openstory --help` and `openstory <cmd> --help` both\nproduce a structured usage block instead of the hand-rolled one.\n\nBehavioral parity with the previous mri-based CLI:\n- dev:     --port, --host, --open, --framework\n[…]\nror (no callers after the switch); 'cli'\n  dropped from the OpenstoryErrorCategory union.\n- mri dependency removed; commander ^14 added.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "refactor(openstory): swap `mri` for `commander` in the CLI",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:34:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c06a93a9688a84829b4d3ef265fd5cfef5bb528",
          "body": "…p sweep)\n\nRan deslop-cli against ./packages/openstory with explicit entry points\nfor each `exports` field, the CLI bin, the shell SPA, and the test\nsuite. The orphaned items below were verified by grep before removal.\n\nFiles removed:\n- src/shell/src/components/ui/tooltip.tsx (no importers)\n- src/sh\n[…]\nto defineConfig().\n\nAfter: deslop reports 0 unused files / exports / dependencies and 0\ncircular imports across 114 files / 403 exports.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(openstory): drop unused files, exports, and dependencies (deslo…",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:30:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c9f0398463cadc27556a077a32b2821b1ab03c3",
          "body": "- parallelize parseFile() calls in ComponentStoriesBuilder.build() with\n  Promise.all; sort the file list first to preserve deterministic story\n  ordering.\n- collapse the .map().filter() chain in deriveTitleFromPath() to a single\n  for...of pass.\n- import openstory directly from src/plugin/plugin.js in the integration\n  test instead of through the barrel re-export.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(openstory): address review-bot nits in component-stories",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bab2888b6dec384f5338272d65d26f32e2071538",
          "body": "…ng `auto` CLI command\n\nThe on-the-fly story synthesis lives on entirely. Renamed to make it\nsymmetric with the existing `stories` option:\n\n  openstory({ stories: ['**/*.stories.tsx'] })\n  openstory({ components: true })\n  openstory({ components: { include: [...], ignore: [...] } })\n\nCLI flags on de\n[…]\nre removed - users that want\nstories on disk can still hand-write them; the synthesized path covers\nthe rest with zero disk maintenance.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "refactor(openstory): rename `auto` to `components`; remove file-writi…",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47c6a242273185c4541cd5cec83f83b8e87f8baf",
          "body": "Generates a story for every component in the repo at runtime - no\n`*.stories.*` files are written to disk. The manifest, iframe HTML, and\nvirtual entry modules are all synthesized in memory and re-derive on\nfile change via Vite's HMR pipeline.\n\n- new plugin option: `auto: true | { components, ignore\n[…]\n-written stories win on id collisions.\n\nThe file-writing `openstory auto` command stays available for users who\ndo want stories on disk.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(openstory): ephemeral auto stories via `--auto` on dev/build",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "32eaca76f8016170ff222533e5fedf50d60d0d73",
          "body": "Adds a new CLI command `openstory auto` that scans the repository for\ncomponents (not just existing story files) and generates a CSF 3 stories\nfile (\"book\") for each one. Globs can be passed positionally to scope\nthe search; otherwise framework-aware defaults are used.\n\n- React/Solid: detects Pascal\n[…]\nSupports --framework, --out, --ignore, --force, --dry-run, and --json\nflags. Existing stories files are preserved unless --force is set.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(openstory): add `auto` command to scaffold stories from components",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f792ff01fcc441a68d4f0293fd7b83d1deb8b123",
          "body": "feat(shell): make UI responsive on mobile",
          "is_bot": false,
          "headline": "Merge pull request #2 from millionco/cursor/mobile-responsive-shell-7db1",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T10:45:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a718664534d15de257f6dd8af4cbd4eed075409",
          "body": "The Openstory shell layout was unusable on narrow viewports: the 288px\nsidebar pushed the canvas off-screen, the top-bar selects overflowed,\nand the horizontal controls panel was cramped.\n\n- Add useIsMobile hook driven by a 768px MOBILE_BREAKPOINT_PX media query\n- Render the sidebar as an overlay dr\n[…]\noverflowing\n- Stack controls-panel label above the input on narrow widths and bump\n  the panel height on mobile so inputs aren't clipped\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(shell): make UI responsive on mobile",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-21T10:39:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "048e990be93cf6fb5a9e4cf3b58a3c63f7eae967",
          "body": "…utput\n\nVite's manifest output is now enabled in `openstory build`. Each\nstory's import graph is walked from the emitted manifest, and every\ntransitively-imported CSS asset (e.g. styles imported by preview.tsx)\ngets a `<link rel=\"stylesheet\">` injected into the per-story HTML.\nBefore this, dist/assets/*.css was emitted but never referenced, so\ndeployed iframes loaded unstyled.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): link CSS extracted from story dependencies in build o…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T09:00:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1f70c0b2fa4a97c0b93186991a06f8109820bdba",
          "body": "Run vite.build() programmatically with the openstory plugin so each\nstory's `virtual:openstory-story-entry?id=…` import is bundled to a\nreal `dist/__story/<id>/entry.js`. Copy the shell SPA to `dist/` so\n`/` serves the tree UI instead of 404. Stories now load the bundled\nentry via `<script type=\"mod\n[…]\nnorepo subpackages whose `package.json`\nlists more than one supported framework can disambiguate without\nadding the plugin to their own vite.config.ts.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): make `openstory build` produce a deployable static site",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:53:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b8a5b8a613732248aba80abca91aa980167377e9",
          "body": "Hand-emit the test entry's DTS from scripts/build-test-dts.mjs because\nthe auto-DTS bundler couldn't inline @testing-library/jest-dom/vitest\n(it imports TestingLibraryMatchers from a sibling that doesn't re-export\nit). The hand-rolled DTS re-exports vitest + testing-library symbols and\ntriple-slash \n[…]\ntesting-library/jest-dom so jest-dom matchers\nattach to expect ambiently. Consumers no longer need @ts-expect-error\nwhen importing from openstory/test.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): ship dist/test.d.ts for openstory/test",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:41:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f5a7b3fb6ea67892a8478087dbb17bb384de1dbf",
          "body": "Rename package, directory, identifiers, constants, error classes,\nvirtual module ids, manifest route, and docs URL from openbook to\nopenstory across the entire monorepo.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: rename openbook to openstory",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:16:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "18ed6d10d5587b1dff6926654d0e3a58b9686bb4",
          "body": "- README pitch is now \"Storybook for Agents\" with a single plain-English\n  follow-up: \"Openbook is a drop-in replacement for Storybook. Your\n  existing stories work as-is.\"\n- Strip em-dashes from all hand-written text: README, CLI help, init\n  output, error messages, comments, changeset, ATTRIBUTION\n[…]\ne punctuation per context.\n- The two remaining em-dashes (CSF sanitization regex + its test input)\n  are intentional; Openbook must strip em-dash to match Storybook's CSF\n  spec sanitization behavior.",
          "is_bot": false,
          "headline": "docs: rewrite README pitch as \"Storybook for Agents\"; remove em-dashes",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:04:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "beb84202d786a64f85d60a7f204cf7fa24af3561",
          "body": "Mirror packages/openbook/README.md to root README.md, matching the\nreact-grab structure: tagline + pitch, Quick Start, How It Works with\nexample, Manual Installation per framework (React/Solid/Vue/Svelte),\nMigrate from Storybook diff, CLI command list, Resources & Contributing\nBack, License.",
          "is_bot": false,
          "headline": "docs: rewrite README in react-grab format",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:01:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aafd434c4f6fc37a8cdf7f6b343f3cf30d7a8fce",
          "body": "- Replace `permissions: {}` (which revokes even the checkout token) with\n  the minimum scopes pkg-pr-new needs: contents:read, pull-requests:write,\n  id-token:write.\n- Update repository.url and bugs.url in packages/openbook/package.json to\n  the actual GitHub repo (millionco/openstory). The package npm name stays\n  `openbook` per the rename.",
          "is_bot": false,
          "headline": "fix(ci): grant pkg-pr-new permissions, sync repo URLs to openstory",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T07:57:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0828af2d3238bd86414c42a0795e541e8f181fa3",
          "body": "- Rename package, classes (Ode* → Openbook*), constants (ODE_* → OPENBOOK_*),\n  CLI command, npm specifiers (ode/* → openbook/*), and all internal tokens.\n- Move packages/ode → packages/openbook via git mv (rename history preserved).\n- Add openbook/vue and openbook/svelte renderer adapters (Vue 3 cr\n[…]\n removes vite CLI binary). Drop unsupported\n  `excludedFiles` oxlint field. Ignore Next.js auto-generated next-env.d.ts.\n  Suppress 2 false-positive no-unassigned-vars warnings on SolidJS ref pattern.",
          "is_bot": false,
          "headline": "chore: rename ode to openbook, add vue+svelte adapters, fix CI",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T07:55:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bc16bc332e3d04ae157335367837a43c7127a2f",
          "body": null,
          "is_bot": false,
          "headline": "fix",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T07:24:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bf23f6a766af82219ba13d6e917e2ea0f82f9c7",
          "body": "- add custom easing curves to index.css (ease-out, ease-in-out, ease-drawer)\n- buttons get active:scale(0.97) with 150ms ease-out transition for press feedback\n- select/tooltip content scales from radix transform-origin variable, not center\n- drop transition-colors from static badges (no hover, no a\n[…]\nn --accent so selection is visually distinct\n- hover background set to transparent (only true selection highlights)\n\nfixture:\n- inject react-grab init() in preview.tsx so every iframe gets the overlay",
          "is_bot": false,
          "headline": "polish shell ui per emil kowalski principles",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T04:01:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a5e70088efdee5f4c0ff811625fbd2b8942138e",
          "body": null,
          "is_bot": false,
          "headline": "init",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T00:16:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43894e715e6bed59263b0446c7706f85c3e79618",
          "body": null,
          "is_bot": false,
          "headline": "chore: gitignore .next build artifacts",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-20T21:35:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a060200736466b2bf496501cecc07acccef07c2",
          "body": null,
          "is_bot": false,
          "headline": "chore: scaffold ode monorepo",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-20T21:35:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 52,
      "latest_release_at": "2026-07-18T05:48:28Z",
      "latest_release_tag": "openstory@0.1.0",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 5,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "openstory",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "components",
            "csf",
            "react",
            "solid",
            "stories",
            "storybook",
            "ui",
            "vite"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/openstory",
          "is_deprecated": false,
          "latest_version": "0.1.0",
          "repository_url": "https://github.com/millionco/openstory",
          "versions_count": 17,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2891,
          "first_published_at": "2026-05-21T08:20:28.107000Z",
          "latest_published_at": "2026-07-18T05:48:26.598000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 16,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-17",
            "count": 1
          },
          {
            "date": "2026-07-11",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "apps/website/tsconfig.json",
        "packages/openstory/src/shell/tsconfig.json",
        "packages/openstory/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 56023,
      "source_files_sampled": 135,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2340
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "next",
          "manifest": "apps/website/package.json",
          "ecosystem": "npm",
          "version_constraint": "^15.3.2"
        },
        {
          "name": "react",
          "manifest": "apps/website/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.1.0"
        },
        {
          "name": "react-dom",
          "manifest": "apps/website/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.1.0"
        },
        {
          "name": "commander",
          "manifest": "packages/openstory/package.json",
          "ecosystem": "npm",
          "version_constraint": "^14.0.3"
        },
        {
          "name": "fast-glob",
          "manifest": "packages/openstory/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.3.2"
        },
        {
          "name": "oxc-parser",
          "manifest": "packages/openstory/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.108.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 5,
        "open_issues": 1,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "aidenybai",
          "commits": 41,
          "avatar_url": "https://avatars.githubusercontent.com/u/38025074?v=4"
        },
        {
          "type": "User",
          "login": "cursoragent",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/199161495?v=4"
        },
        {
          "type": "User",
          "login": "ben-million",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/210088851?v=4"
        },
        {
          "type": "User",
          "login": "binarytide",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/899298?v=4"
        }
      ],
      "contributors_sampled": 4,
      "top_contributor_share": 0.804
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "code-quality.yml",
        "integration.yml",
        "publish-any-commit.yml",
        "publish.yml",
        "test-build.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 3,
            "reason": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/26 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "18 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "0a0f5a73691ebd22acad58f588a4b228ad50d219",
        "ran_at": "2026-07-23T13:48:28Z",
        "aggregate_score": 2.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-18T05:47:56Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-18T05:47:06Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": [
        {
          "number": 1,
          "created_at": "2026-05-20T21:35:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/millionco/openstory",
    "host": "github.com",
    "name": "openstory",
    "owner": "millionco"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 49,
      "inputs": {
        "security": 23,
        "vitality": 66,
        "community": 47,
        "governance": 54,
        "engineering": 48
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 66,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "commits_last_year": 52,
              "human_commit_share": 0.981,
              "days_since_last_push": 5,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "52 commits in the last year",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 52
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "openstory@0.1.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 47,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "forks": 2,
              "stars": 16,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "16 stars",
                "points": 19.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "openstory"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2891
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,891 downloads/month across npm",
                "points": 46.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2891,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 4,
              "top_contributor_share": 0.804
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 80% of commits",
                "points": 4.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 80
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "4 contributors",
                "points": 5.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "merged_prs": 5,
              "open_issues": 1,
              "closed_issues": 0,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "5/5 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 5,
                      "decided": 5
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 405,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "millionco",
              "public_repos": 32,
              "account_age_days": 1879
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "405 followers of millionco",
                "points": 18.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 405,
                      "login": "millionco"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "32 public repos, account ~5 yr old",
                "points": 21.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 32
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "openstory"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "17 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 48,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 23,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 23,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 2.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "18 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 73,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.863,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2340
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "44 of 51 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 44,
                      "sampled": 51
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "apps/website/tsconfig.json",
                "packages/openstory/src/shell/tsconfig.json",
                "packages/openstory/tsconfig.json"
              ],
              "agent_commit_share": 0.423,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "apps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "apps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "22 of the last 52 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 22,
                      "sampled": 52
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 56023,
              "source_files_sampled": 135,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/135 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 135,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
    "deps.dev does not index npm:openstory@0.1.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T13:48:39.330486Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/millionco/openstory.svg",
  "full_name": "millionco/openstory",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistikennpm.