Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.
runtm-ai/runtm erreicht einen Gesundheitsindex von 70 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Engineering Quality (96/100) ab, am schwächsten bei Sustainability & Governance (46/100). Zuletzt vor 2 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
70
gesamt / 100
Gut
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
70
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
35
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von pypi:runtm@0.2.132 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 35 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Typprüfbarer Code — Python mit Typprüfungs-Konfiguration (templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json)
55/55
Handhabbare Dateigrößen — 0/260 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
Python
largest_source_bytes
57.346
source_files_sampled
260
oversized_source_files
0
Eckdaten
286GitHub-Sterne
3Mitwirkende
94Commits, letzte 12 Monate
2Tage seit letztem Push
13Releases
1Bus-Faktor
8offene Issues
PyPIPaket-Ökosysteme
Warnungen zur Datenerhebung
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 31 ⇿
0Sterne
31Forks
12Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 0Patch 0
OpenSSF Scorecard 4.8 / 10
4.8Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-27 12:55 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Abhängigkeits-Advisories 0
Die Installation von pypi:runtm@0.2.132 zieht 35 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"ai-agents",
"agent-runtime",
"agentic",
"control-plane",
"ephemeral-environments",
"infra",
"llm-tools",
"llmops",
"observability",
"open-source",
"serverless",
"app-runtime",
"anthropic",
"claude",
"cursor",
"openai",
"claude-code",
"sandbox"
],
"is_fork": false,
"size_kb": 7517,
"has_wiki": true,
"homepage": "https://www.runtm.com/",
"languages": {
"Go": 244556,
"CSS": 2929,
"Mako": 1943,
"Shell": 8382,
"Python": 1191410,
"Makefile": 2801,
"Dockerfile": 8951,
"JavaScript": 3639,
"TypeScript": 94278
},
"pushed_at": "2026-07-24T22:35:44Z",
"created_at": "2026-01-02T21:37:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T22:35:38Z",
"description": "Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python",
"Go"
]
},
"owner": {
"blog": "https://www.runtm.com/",
"name": "runtm",
"type": "Organization",
"login": "runtm-ai",
"company": null,
"location": "United States of America",
"followers": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/249835438?v=4",
"created_at": "2025-12-15T22:15:52Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 223
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "packages/agent/v0.0.13",
"kind": "other",
"published_at": "2026-07-24T22:36:50Z"
},
{
"tag": "packages/agent/v0.0.12",
"kind": "other",
"published_at": "2026-07-09T23:38:12Z"
},
{
"tag": "packages/agent/v0.0.11",
"kind": "other",
"published_at": "2026-07-09T23:23:16Z"
},
{
"tag": "packages/agent/v0.0.10",
"kind": "other",
"published_at": "2026-07-01T20:54:51Z"
},
{
"tag": "packages/agent/v0.0.9",
"kind": "other",
"published_at": "2026-07-01T04:35:47Z"
},
{
"tag": "packages/agent/v0.0.8",
"kind": "other",
"published_at": "2026-06-24T23:47:05Z"
},
{
"tag": "packages/agent/v0.0.7",
"kind": "other",
"published_at": "2026-06-17T23:00:29Z"
},
{
"tag": "packages/agent/v0.0.6",
"kind": "other",
"published_at": "2026-06-17T20:50:19Z"
},
{
"tag": "packages/agent/v0.0.5",
"kind": "other",
"published_at": "2026-06-17T16:14:41Z"
},
{
"tag": "packages/agent/v0.0.4",
"kind": "other",
"published_at": "2026-06-16T04:53:51Z"
},
{
"tag": "packages/agent/v0.0.3",
"kind": "other",
"published_at": "2026-06-15T23:22:55Z"
},
{
"tag": "packages/agent/v0.0.2",
"kind": "other",
"published_at": "2026-05-28T02:51:30Z"
},
{
"tag": "packages/agent/v0.0.1",
"kind": "other",
"published_at": "2026-05-16T01:04:40Z"
}
],
"recent_commits": [
{
"oid": "02aea30518314b41688bf59a4717a710a993158d",
"body": "…#45)\n\nEvery org-scoped command (templates, skills, MCP, guardrails, team\ntelemetry) reported \"the API key has no org\" even when the key was\norg-bound, forcing users to set RUNTM_ORG_ID by hand.\n\nThe bootstrap in requireOrgClient called GET /auth/verify. That route is\nmounted at the backend root, bu\n[…]\nn organization_id on personal keys; it now shares the same\nresolution and is applied after the payload copy so a null\norganization_id can't clobber it.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(agent): resolve org context from /v1/me so org-scoped keys work (…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-07-24T22:35:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "51a4fc358a88d21d03afae4b47fe2c6f5d1fb2e8",
"body": "Lint has failed on every PR since 2026-07-23 with no code change to\nexplain it. Ruff 0.16.0 published at 19:10 UTC that day; the first\nfailure was 19:40. Both workflows installed Ruff unpinned -- `uvx ruff`\nin lint.yml and `pip install ruff` in ci.yml -- so CI silently adopted\nthe new major the mome\n[…]\nthing. Adopting 0.16.0 should be its own PR that\napplies the reformat alongside the bump, so the change is reviewable\nrather than arriving unannounced.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "ci: pin Ruff to 0.15.22 so a new release can't red every PR (#46)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-07-24T22:28:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39ef7fd2f5979b2db4655d1908fe19b29a3e1615",
"body": "…ning upgrades (#43)\n\n* fix(agent): resolve gosec G301/G304/G306 code-security findings\n\nOneleet's gosec scan flags 9 findings in packages/agent:\n\n- G301 (3): skill install/pull created directories 0755; tightened to\n 0750 (skills_cmd.go, skills_pull_cmd.go x2)\n- G306 (2): skill files written 0644;\n[…]\ner pytest 9.1.1 with the\nupgraded deps; go build/test pass in packages/agent.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(security): resolve gosec code-security findings + dependency-scan…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-11T02:03:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b59ea9f545d769b9f82f09cba491ba3bfb9ecbd",
"body": "'1.25' resolved to 1.25.11 on the runner, leaving one HIGH stdlib CVE\n(CVE-2026-39822, fixed in 1.25.12) in the released binaries.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release-agent): pin Go 1.25.12 (CVE-2026-39822 stdlib fix)",
"author_name": "Charlie",
"author_login": null,
"committed_at": "2026-07-09T23:37:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85be065fb3cfd20bddd8c1eb6f997849621da684",
"body": "The v0.0.10 runtm-api release binaries embed the Go 1.23.12 stdlib, which\nArtifact Registry scanning flags with 2 CRITICAL + 22 HIGH CVEs\n(CVE-2025-68121, CVE-2026-27143 et al) in every sandbox image that bakes\nthe CLI. Go 1.25.9+ carries the fixes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release-agent): build releases with Go 1.25 (patched stdlib)",
"author_name": "Charlie",
"author_login": null,
"committed_at": "2026-07-09T23:22:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62408384dc4953aadefdb136f3bcdf52affa359f",
"body": "The `runtm-api integrations` command only ever managed LLM provider API\nkeys (Anthropic/OpenAI). Naming it \"integrations\" collided with the\nexternal-integration surface (MCP servers, skills, tools, CLIs, APIs)\ndocumented in the `runtm-integrations` skill, so a prompt about\n\"integrations\" was ambiguo\n[…]\nling.\n\nBREAKING CHANGE: `runtm-api integrations …` is now `runtm-api providers …`.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(agent)!: rename `integrations` CLI command to `providers` (#40)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-01T20:46:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f6391fa29661fe2636aa4ed6f6fe7d85f606498",
"body": "…d integration decision process (#39)\n\n* docs(agent): rename runtm-directives skill to runtm-integrations + add integration process\n\nRename the bundled `runtm-directives` skill (and its embedded copy) to\n`runtm-integrations`, and rewrite its \"adding an integration\" guidance into a\nstructured 5-step \n[…]\n build passes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(agent): rename runtm-directives skill to runtm-integrations + ad…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-01T04:32:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e0f6b48c0ec348917339cdffad50087266ca524",
"body": "…iling (#38)\n\n`runtm-api skills install` reported \"No AI agent skills directory found\n(~/.claude or ~/.cursor)\" even when ~/.claude existed, because detection\nstat'd the ~/.claude/skills *subdir* (the parent of the runtm target) rather\nthan the agent root. A fresh agent has ~/.claude (settings.json \n[…]\n up.\n\nAdds tests for resolveSkillTargets (root-dir detection, no-agent, override).\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(agent): skills install creates the agent skills dir instead of fa…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-24T23:40:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "030a0affc8c8e678549257ef5d0948760f9e2060",
"body": "…ally (#35)\n\nAdd `runtm-api skills pull <template-id>`, which downloads every skill\nthat materializes into a template and writes it to disk in the same\nlayout a session gets at launch:\n\n ~/.claude/skills/<name>/SKILL.md (claude-code)\n ~/.agents/skills/<name>/SKILL.md (codex)\n\nIt lists the org'\n[…]\nx pulls\nits own skills instead of the worker shuffling every blob through its RAM.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): add `skills pull` to materialize a template's skills loc…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T22:53:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6f813f2336f70680a2fcf0b58b3715519ac076f0",
"body": "Adds the attachment surface the dashboard already has, so sessions launched\nfrom a template can load org skills/MCP servers without the UI.\n\n- skills|mcp attach|detach|attachments <id> — scope a directive to templates\n (--template), repos (--repo), or all repos (--all). attach/detach read the\n cur\n[…]\n API vs CLI vs MCP and auth methods and\n let the user choose before implementing.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): attach skills & MCP servers to templates from the CLI (#34)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T19:49:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a4c30db6bdad0d6275e80caee3bc85a523fec9e4",
"body": "…xes (#33)\n\n* feat(agent): manage Slack/GitHub agents from the CLI + URL output fixes\n\nAdd `runtm-api agents` (create/list/get/update/delete) for Slack and GitHub\nintegration agents, normalize RUNTM_API_URL to the cloud proxy, and stop\nHTML-escaping URLs in JSON output.\n\n- agents create --type slack\n[…]\nnded `--logo`.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): agents + custom tool providers in the CLI, URL output fi…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T16:09:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7aca30771557793436878fcd87d53148f5f3e143",
"body": "Add `runtm-api skills`, `runtm-api mcp`, and `runtm-api tools` with full\ncreate/get/list/update/delete against the cloud API, so agents can author\nskills, wire up MCP servers, and store provider tool credentials without the\ndashboard.\n\n- skills: cloud CRUD alongside the existing `install`; `skills l\n[…]\nands; SKILL.md bumped\n to 0.7.0 with a Quick Reference row and a More Skills link\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): CRUD skills, MCP servers, and tools from the CLI (#32)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-16T04:49:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ab7714a1f650fe11b4b6a094a54bb0893f542864",
"body": "Newer uv (via setup-uv@v5) re-locks and syncs the project as a side\neffect of `uv version`. Resolving packages/cli pulls in its dev extra\nwhich depends on runtm-agents and runtm-sandbox, workspace-only packages\nthat are never published to PyPI, so resolution fails and the Publish to\nPyPI job exits 1\n[…]\n-frozen so `uv version` only edits pyproject.toml without\nre-locking or resolving.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): pass --frozen to uv version in publish workflow (#31)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-15T23:15:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "029bc4be6c6e8089741000966d042d2b065ea375",
"body": "…ent (#30)\n\n* feat(cli): add interactive SSH/terminal sessions and org template management\n\nAdds an interactive terminal/SSH attach command for sandbox sessions\n(Go agent) and a `runtm template` command group for managing org\ntemplates and their session arguments, mirrored in the Go agent.\nUpdates t\n[…]\nmplate command\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): interactive SSH/terminal sessions and org template managem…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-15T23:00:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c8cc57e2b6af16583ac3f7a7d08f1b816c56400b",
"body": "…#29)\n\nStop recurring \"SSL connection has been closed unexpectedly\" errors\nbehind Fly MPG's PgBouncer:\n- Lower pool_recycle 1800s -> 300s so connections recycle before the\n upstream pooler closes idle server connections (~1/3 of pre-ping\n probes were hitting dead connections)\n- Add TCP keepalives \n[…]\na joinedload, since\nDeploymentResponse.from_db() reads provider_resource.app_name.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(api): rework DB pool config for PgBouncer + fix deployments N+1 (…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-12T20:18:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "000cbb88fe37c4f45a3fb22b167d328fea27ce46",
"body": "Co-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>",
"is_bot": false,
"headline": "imrpve docs and fix cli issue (#22)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-25T05:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "351f87780e5063e8ef0fe3272c9e5c5a35dfe2c5",
"body": null,
"is_bot": false,
"headline": "Merge runtm-api goreleaser installer changes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-16T00:54:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c08bdcc7d492c337f2f9f2393b23cb754913df0",
"body": "Add a GitHub release workflow, hosted installer docs, and skill sync hooks so agents can install runtm-api without a local Go toolchain.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(agent): publish runtm-api binaries with goreleaser",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-16T00:54:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1ce961ae08239c742367ed9befef711459987539",
"body": "Org-scoped commands (templates, team telemetry, team secrets, org\ninstructions, guardrails) previously errored when RUNTM_ORG_ID wasn't\nset even if the API key was already bound to an org. Now the CLI calls\n/auth/verify lazily on first need (memoized per process) and uses the\nkey's embedded organiza\n[…]\ns can confirm before running mutating commands.\n\nAdds runtime_test.go covering verify success, personal-key empty path,\nand verify failure propagation.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): auto-discover org from API key for org-scoped commands",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T20:07:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "50747fce84bcecc0a142cb8df3e0359003c98abd",
"body": "All canonical endpoint examples (sessions, templates, secrets, user,\norganizations, deploy, auth/verify) now use the /api/cloud/* namespace\nwhich proxies through Next.js to the FastAPI backend without colliding\nwith dashboard BFF routes.\n\nAlso updated mint.json baseUrl from /api to /api/cloud.\n\nv0/v1 endpoint docs are unchanged (already proxied directly).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: update API reference URLs to use /api/cloud proxy namespace",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:40:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d9e9038fbdc74be755f4f443d8fa32efc64fff31",
"body": "Use https://app.runtm.com/api/cloud as the production default so the CLI can\nreach FastAPI canonical /api/* routes without colliding with dashboard BFF\nroutes. Local development continues to use RUNTM_API_URL=http://localhost:8081/api.\n\nUpdate README and embedded skill docs to explain the proxy namespace.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: route runtm-api traffic through cloud proxy namespace",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:32:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "130e9db9e8d32543e541a9f07523cc69905c598e",
"body": "The pip CLI (runtm v0.2.x) and Go CLI were both called `runtm`, causing\nPATH shadowing when customers had both installed. The Go binary is now\n`runtm-api` so both coexist without conflict.\n\nUpdated: cmd directory, Makefile, install.sh, README, all 4 skill files,\nembedded skill copies, and root cobra command.\n\nInstall: go install github.com/runtm-ai/runtm/packages/agent/cmd/runtm-api@latest\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: rename binary from runtm to runtm-api to avoid pip CLI collision",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:12:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a03d55f861eb81ddd4c17d12c0221be41c7e2777",
"body": "feat: add `runtm skills install` with embedded skill files",
"is_bot": false,
"headline": "Merge pull request #20 from runtm-ai/feat/agent-cli",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23db581ff7a06403164f62e780d55870f408e5b3",
"body": "Skills are now baked into the binary via Go embed. `runtm skills install`\nauto-detects Claude Code and Cursor directories and writes all 4 SKILL.md\nfiles with no network fetch. Customer install is now two commands:\n\n go install github.com/runtm-ai/runtm/packages/agent/cmd/runtm@latest\n runtm skills install\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add `runtm skills install` with embedded skill files",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:15:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1b32f77337414e50385f2edb6e4a83a9e328dcce",
"body": "feat: add Go agent CLI for programmatic cloud API access",
"is_bot": false,
"headline": "Merge pull request #19 from runtm-ai/feat/agent-cli",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64b36ddd730d78b3c4f8c8cf1c39548747fe4abd",
"body": "Thin Go CLI (`runtm`) that wraps the hosted cloud API so AI coding agents\n(Claude Code, Cursor, etc.) can drive Runtime programmatically.\n\nSurface:\n- sessions: full CRUD + files + env + git + deploy + lifecycle + prompt SSE\n- templates: full lifecycle (create/build/fix-session/save-snapshot/secrets)\n[…]\n commands to run, error\nrecovery, and multi-step workflow recipes. Installed via `go install`.\n\nAll endpoints verified end-to-end against live backend.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add Go agent CLI for programmatic cloud API access",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:11:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "15279942d647d1a0ab7ea438bca63f884f0f238f",
"body": "docs: surface v0 programmatic and v2 sandbox-lifecycle session endpoints",
"is_bot": false,
"headline": "Merge pull request #18 from runtm-ai/feat/docs-sessions-v0-v2",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9982895b2dca34a0348a671ea956fd3fbb7e951",
"body": "Large endpoint groups (Sessions 37, Templates 14, Context 17, Activity\n10) are now broken into collapsible subgroups so the sidebar is\nscannable without endless scrolling.\n\nSessions: CRUD at top, then Lifecycle, Prompts, Files, Env Vars,\n Instructions, Git as nested groups\nTemplates: CRUD at top, t\n[…]\n then Personal, Team\nContext: Instructions at top, then Skills\nProvider Keys: Resolved + Plan at top, then User Keys, Org Keys\nActivity: Personal, Team\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: organize API reference sidebar with nested collapsible groups",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:19:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b23f9290c8b09857515fc31bed21df8778201197",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: fix preview URL to use dev.runtm.com instead of e2b.app",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:16:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "75cdd68304c5ee9ac2fd39df7d2f5ec08e214e68",
"body": "- Replace all E2B references with generic \"sandbox provider(s)\" phrasing\n so docs are provider-agnostic\n- Replace all em dashes with hyphens across 54 mdx files for consistent\n punctuation\n- Hide Programmatic Agents (v0) and Sandbox Lifecycle (v2) nav groups\n from mint.json (pages kept on disk, just not wired into sidebar)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: remove E2B branding and em dashes from all doc pages",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:15:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a6253459e95c34ea96971e87233b51b762575611",
"body": "The Sessions API reference was missing the v0 (programmatic API-key) and\nv2 (sandbox lifecycle) surfaces — only the launch endpoint existed for\nv0 and it wasn't even wired into the sidebar nav. This makes both\nversions discoverable and labels the legacy v1 endpoints they replace.\n\n- Add 6 v0 referen\n[…]\n- Cross-link launch.mdx to the rest of the v0 surface\n- Add deprecation Warning banners to v1 start.mdx and heartbeat.mdx\n pointing at v2 replacements\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: surface v0 programmatic and v2 sandbox-lifecycle session endpoints",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:04:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0dccf75e48b6ce25d0198d3063b9fb41578bac94",
"body": "Restructure docs for cloud API and move OSS docs to open-source/",
"is_bot": false,
"headline": "Merge pull request #17 from runtm-ai/feat/docs-cloud-api-restructure",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-10T23:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98ff371602a256f1485a518d55c6fa2e83ff7543",
"body": "- Add comprehensive cloud-api/ docs covering sessions, auth, websockets,\n templates, secrets, deploy, integrations, and activity endpoints\n- Add concepts/ section explaining sessions, agents, templates, context,\n guardrails, organizations, observability, and real-time features\n- Add new guides for\n[…]\nder open-source/ to separate cloud vs OSS documentation\n- Update mint.json navigation and introduction/quickstart pages\n- Update logos and cursorignore\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "Restructure docs for cloud API and move OSS docs to open-source/",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-10T19:04:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2ea6c9310ece26d73e47bdc2909a011cd2dea9c3",
"body": null,
"is_bot": false,
"headline": "fix bug with volumes",
"author_name": "Carlos Volante",
"author_login": "cvolante54",
"committed_at": "2026-05-10T05:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db8f05043ea372cb4d979a098b5254bd8d4ac891",
"body": "* increase timeouts\n\n* fix linting",
"is_bot": false,
"headline": "increase timeouts (#15)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-10T04:30:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1adda63c981308348ccd8d0e94a28d7aeb77d387",
"body": null,
"is_bot": false,
"headline": "upgrade versions",
"author_name": "Carlos Volante",
"author_login": "cvolante54",
"committed_at": "2026-05-09T16:51:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9354e9c9ee16f0937558e5dbc0e568f7a4eb4279",
"body": "* add volume functionality\n\n* update versions\n\n* fix linting",
"is_bot": false,
"headline": "Volumes (#14)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-09T16:45:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d63cba4171aed5e69de5f72a0034e83d2d2aeb4",
"body": null,
"is_bot": false,
"headline": "improve connection pooling settings (#13)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-03T16:40:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf9e73cdafeef36d8fa4c88313bbeae6f9662d1",
"body": "* fix deployment issues + rq upgrade + cleanup\n\n* fix linting\n\n* fix format",
"is_bot": false,
"headline": "Cv/improve worker deploy (#12)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-04-03T05:13:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d6ba8cb25204d7385f1111d3a3f996b0a0c972",
"body": "* add lint and publish workflows\n\n* update version\n\n* fix ci issues\n\n* fix formatting\n\n* fix ci\n\n* add necessary files\n\n* reformat",
"is_bot": false,
"headline": "add lint and publish workflows (#11)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-04-01T01:10:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d910ded716c68bd74097c3bc77d01b0de88edc3",
"body": "- DB session: use module-level engine/session singleton to share connection\n pool across requests instead of creating per-request (fixes max_connections\n exhaustion under load)\n- Deploy: reorder custom domain provisioning to add SSL cert first, then\n create DNS records (including ACME challenge CNAME), then poll for\n certificate verification\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: singleton DB engine pool and SSL cert-first deploy ordering",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-03-24T23:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "545d148b0f948fc54474534a6ee1845684402bcc",
"body": "…le leaks\n\n- Add get_path() and cleanup_path() to ArtifactStore ABC so all backends\n (including future ones) implement a consistent local-path interface\n- LocalFileStore.cleanup_path() is a no-op (paths are real, not temp)\n- DeployJob now cleans up downloaded artifacts in a finally block to\n prevent temp file accumulation on long-running workers\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: add get_path/cleanup_path to ArtifactStore base, prevent temp fi…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-03-19T22:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afe0927aa3b2c56df4747048741750f984934cd1",
"body": "Move LocalFileStore and get_artifact_store() factory to shared package so both API and worker can use them without cross-package dependencies. Add a registry pattern (register_backend) so cloud extensions can plug in S3/Tigris without modifying OSS code.\n\n- shared/storage/ now owns: ArtifactStore AB\n[…]\nbecomes a backwards-compat re-export shim\n- Remove S3FileStore and boto3 from OSS (moved to runtm-cloud)\n- Fix API route import: runtm_shared.storage instead of runtm_worker.storage\n\nMade-with: Cursor",
"is_bot": false,
"headline": "refactor: move S3FileStore out of OSS, keep storage layer lean",
"author_name": "jjpd777",
"author_login": "jjpd777",
"committed_at": "2026-03-19T21:41:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19addf2ff1c37c56f63c8d52c8c528d95551bdce",
"body": "Add a pluggable storage backend so the worker can fetch deployment\nartifacts from S3-compatible storage (Tigris on Fly.io) instead of\nrequiring a shared Docker volume or HTTP fallback between machines.\n\n- Add S3FileStore implementation using boto3\n- Add get_artifact_store() factory to select backend\n[…]\neployment route to store artifacts via the backend\n- Add ARTIFACT_STORAGE_BACKEND config (local/s3) across packages\n- Add comprehensive tests for both LocalFileStore and S3FileStore\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat: add S3/Tigris artifact storage backend",
"author_name": "jjpd777",
"author_login": "jjpd777",
"committed_at": "2026-03-19T21:41:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be50968597f97016dc659bb733f3b62e92b5477b",
"body": "- Add exclude_dirs set to validate_python_syntax calls so .venv, node_modules,\n __pycache__, dist, build, etc. are skipped during syntax checking\n- Move pathspec import to module level in api_client.py (fixes UP037 + F821\n from quoted return type annotation on build_ignore_spec)\n- Bump CLI to 0.2.15\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: validate python syntax excludes dirs, fix pathspec import lint",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:28:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bfc890fe98eb85e4f976614d5700d9e6a6f2e89",
"body": null,
"is_bot": false,
"headline": "new changelog",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462569f0a887e2f087ad954aff64c5dcbe3be77f",
"body": "The default 60s httpx timeout is too short for the deploy upload\nrequest, which goes through Cloud Backend → OSS API → Fly.io build\nqueue. This chain regularly exceeds 60s, causing ReadTimeout errors.\n\nThe auth-check client keeps the default timeout since it only\nneeds a quick round trip.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: increase deploy upload timeout from 60s to 300s",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:24:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "34f739cdf28ddd622fef8ab4d43ea1ff041ca112",
"body": "The validate command had a hardcoded exclude_dirs set with only 7 entries\n(.git, node_modules, etc.) for its artifact size check, while\ncreate_artifact_zip used pathspec with .runtmignore/.gitignore support.\nThis caused validate to report \"project too large\" for projects with\nsandbox caches (.npm, .\n[…]\nec() and\nALWAYS_EXCLUDE_PATTERNS so both validate and deploy use the same\nmatching. The error message now points to .runtmignore instead of\n.gitignore.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: validate command now respects .runtmignore for size checks",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T05:24:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fba758001c06fb4676c82a00c5e64af979cc343a",
"body": "Removed the old standard tier. Renamed standard (2GB) to starter\nas the default tier. Three tiers now:\n- starter: 2GB RAM, 2 CPUs (default for all projects)\n- performance: 4GB RAM, 4 CPUs\n- pro: 8GB RAM, 4 CPUs\n\nFullstack validation no longer rejects starter since all tiers\nhave enough RAM (2GB+) for Node.js + Python.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "refactor: simplify to 3 deployment tiers (starter, performance, pro)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-23T03:51:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "41b306ec4c7f27cad587d4db3e58b2d38dde6886",
"body": "Updated all deployment tiers with more resources:\n- starter: 256MB -> 512MB RAM, 1 shared CPU\n- standard: 512MB -> 2GB RAM, 2 shared CPUs\n- performance: 1GB -> 4GB RAM, 4 shared CPUs\n- pro (new): 8GB RAM, 4 shared CPUs\n\nUpdated VM size mapping in docker builder for shared-cpu-4x\nat 4GB+ RAM. All tiers continue to use auto-stop for cost savings.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: upgrade deployment tiers and add PRO tier (8GB RAM)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-23T03:43:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "da36a9e7d856d53759950c69c84b7a5072a66b28",
"body": "…stroy\n\nWhen destroying a deployment, the code sets is_latest=False on the current\ndeployment and is_latest=True on the previous one in the same transaction.\nSQLAlchemy may flush the SET is_latest=True UPDATE before the SET is_latest=False,\nviolating the ix_deployments_unique_active_name partial unique constraint.\n\nAdding db.flush() between the two changes ensures the database sees the\ndemotion before the promotion.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: flush is_latest=False before promoting previous deployment on de…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-15T22:00:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2c607c86607673e47916040ea9e8328b90dab4e3",
"body": null,
"is_bot": false,
"headline": "fixed formatting errors",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-24T01:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca0c7fd390b0c7323a1eb3729f7cd03c089bbd06",
"body": null,
"is_bot": false,
"headline": "fix: skip lockfile check for docker template",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-24T01:30:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83112a54080e0676993044b4436db56a99d787b5",
"body": null,
"is_bot": false,
"headline": "increased versioning",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-22T03:34:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "868d283b7ae8b4e41e1691d771a90fc201bcc97e",
"body": null,
"is_bot": false,
"headline": "added new version + changelog update",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-21T03:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97b0b8d36b70607f2a5e3b1dc4c08e0c1a4e176d",
"body": null,
"is_bot": false,
"headline": "fixed type and lint issues",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-21T02:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a2d0a432148ef7e8f588efcac2ecd573ac3bb63",
"body": null,
"is_bot": false,
"headline": "lint fixes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-14T08:39:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43cf57ab6990b262992d9477e07331a90593c081",
"body": null,
"is_bot": false,
"headline": "fixed ruff and lint errors",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T16:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "746aeae3f865fd19cd61a8374ee91ad246747f13",
"body": null,
"is_bot": false,
"headline": "updated readme with sandbox quickstart",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T07:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d53ee6670ecd79b661d023a8bd7becb04035b1d",
"body": null,
"is_bot": false,
"headline": "added local isolated sandbox environments via sandbox-runtime",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T07:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bcd1e379b5e6f236a7b93dbe049062f8e28c270",
"body": null,
"is_bot": false,
"headline": "fixed old-style type annotations",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-12T05:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbb7068b920d9c27a10f2cfe0081739d5a242aac",
"body": null,
"is_bot": false,
"headline": "improved explanation of runtm",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-12T05:41:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59dbe0c778e6324cb604d3182e62dd4f60f812ee",
"body": null,
"is_bot": false,
"headline": "updated discord links",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-08T01:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7e807cdf0df8c9059bfa6a3a8496fc1d177fc1f",
"body": null,
"is_bot": false,
"headline": "updated docs links",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-07T06:48:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d473db901cc35eed2e275f671fbe1221e4f21d2",
"body": null,
"is_bot": false,
"headline": "added docs",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-07T06:30:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a490658c0968c72017cfea52a5b43edc96bb9e66",
"body": null,
"is_bot": false,
"headline": "enhanced wording for readmes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-06T06:26:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93ca6ab37dcf907e290b11a580db369276e34eac",
"body": null,
"is_bot": false,
"headline": "updated demo video url",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-03T01:21:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ef80bc8a517e374323c37f6a553e74223a3372a",
"body": null,
"is_bot": false,
"headline": "added demo video plus licenses",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-03T01:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35266cddb0a0262c0b067e82cdaa3baae547503",
"body": null,
"is_bot": false,
"headline": "added test update",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T22:34:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ad0e562a6e295cdd4b282baba993e0a09677be9",
"body": null,
"is_bot": false,
"headline": "updated tests",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T22:05:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10cd1f4abd45de0accd62ac664b2611ae8debdeb",
"body": null,
"is_bot": false,
"headline": "ignored certain patterns with ruff",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:52:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ab497e4df3bb683961bf5f6bac8cd1f6ae138e7",
"body": null,
"is_bot": false,
"headline": "redacted readme",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:43:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64d88bb855025dd1aba6489ddcc386e482d3ffb5",
"body": null,
"is_bot": false,
"headline": "new readme",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:36:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e68789cde1354b3fb7b1f95bba001a30606e6a3",
"body": null,
"is_bot": false,
"headline": "updated policy tests",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T20:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c88db320b5bbc70e9e79d3785b42f48d985cd44",
"body": null,
"is_bot": false,
"headline": "added policy to allow redeploys",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T20:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51e838fe4a0c3711904361b105c2149a03c971d",
"body": null,
"is_bot": false,
"headline": "modified comments",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T19:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2602312c891f6820216b9f11cb05cef9eb8e2143",
"body": "…nancy\n\nWhen trust_tenant_header=true (single-tenant mode), the API reads\nX-Tenant-Id and X-User-Id headers from requests authenticated with\nthe service token. This enables multi-tenant data isolation when\nthe API runs behind a trusted internal proxy that validates user auth.\n\nSECURITY: Only enable when the API is network-isolated behind a\ntrusted proxy. The proxy must validate user authentication before\nforwarding requests with tenant headers.",
"is_bot": false,
"headline": "feat(api): add trusted tenant header support for proxy-based multi-te…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T18:48:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a69f6959b78dc1aae4e48427762d2a021bff4abd",
"body": null,
"is_bot": false,
"headline": "added trust tenant fix",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T18:45:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbffa76a491561d9612f134549e16718def3dfeb",
"body": null,
"is_bot": false,
"headline": "improved ready at status",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T08:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d20f9159233ce662a3acf3a6ed7987b2a566ec9f",
"body": null,
"is_bot": false,
"headline": "improved telemetry cli handle",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:46:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec9ea9702816460d4c5e2704bd55987141a04abb",
"body": null,
"is_bot": false,
"headline": "fixed urls",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:13:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adc341a5fc40550b19493e0ab178b8c898f10af",
"body": null,
"is_bot": false,
"headline": "fixed telemetry endpoint",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:12:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "077db2f989fc88e5ea54de9fc228465e42fd981e",
"body": null,
"is_bot": false,
"headline": "added suspend mode instead of stop",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T06:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1acca9bf6afc93dbb0e11eeafe881a4bb69614cb",
"body": null,
"is_bot": false,
"headline": "improved deployment versioning",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T06:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63901f666089cee37fbf4f688db71a12c406967e",
"body": null,
"is_bot": false,
"headline": "added flyctl",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cdf26c3fbfdd41f46dbc86b7db825127684e974",
"body": null,
"is_bot": false,
"headline": "fixed docker bugs",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc8e06dda325bddc256c88cd1ec1609db2767fd1",
"body": null,
"is_bot": false,
"headline": "fix: fail fast if FLY_API_TOKEN missing for remote builder",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f73568c1958e3149ae9605109ccad79dd412675",
"body": null,
"is_bot": false,
"headline": "fix: rename build/ to builder/ to avoid Python packaging conflict",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:08:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18dfd78aa9a3ee9671115ca151737aa20ce7bad",
"body": "- Fix .gitignore to use /build/ instead of build/ to not ignore worker's build module\n- Add packages/worker/runtm_worker/build/ which was incorrectly gitignored\n- Fix SQLAlchemy filter-after-limit bug in telemetry service",
"is_bot": false,
"headline": "fix: add missing build module and fix gitignore",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T04:46:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b4320adf74e07df0ec462191319b330e6b9ca5",
"body": null,
"is_bot": false,
"headline": "added policy enforcement for usage",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T02:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98a3eeec8d8a58c532c98edb266a9447c2945151",
"body": null,
"is_bot": false,
"headline": "preparing for OSS release",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T00:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "349e17c6e43d025147830e0814b95531037cc0f6",
"body": null,
"is_bot": false,
"headline": "feat: config-only deploys with src_hash validation",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-01T03:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c35edaf4f5aec4bcdffee6b2ec3a7fc9062c101b",
"body": null,
"is_bot": false,
"headline": "chore: update default api_url to use Cloud Backend proxy",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-01T00:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c43423d07b0d681abdaa0c7d8a8a77cdeb6433c",
"body": null,
"is_bot": false,
"headline": "Initial commit - runtm OSS",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2025-12-30T23:58:04Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 94,
"latest_release_at": "2026-07-24T22:36:50Z",
"latest_release_tag": "packages/agent/v0.0.13",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 19,
"days_since_latest_release": 2,
"mean_days_between_releases": 4.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "runtm",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"ai",
"cli",
"deployment",
"devops",
"fly.io",
"serverless",
"Development Status :: 4 - Beta",
"Environment :: Console",
"Intended Audience :: Developers",
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.9",
"Topic :: Software Development :: Build Tools",
"Topic :: System :: Software Distribution"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/runtm/",
"is_deprecated": false,
"latest_version": "0.2.132",
"repository_url": "https://github.com/runtm-ai/runtm",
"versions_count": 34,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-01-02T03:23:12.428096Z",
"latest_published_at": "2026-07-24T22:35:54.128473Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 31,
"stars": 286,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-04",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-05-21",
"count": 3
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-23",
"count": 3
},
{
"date": "2026-05-25",
"count": 2
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-30",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
},
{
"date": "2026-06-05",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 31,
"total_forks": 31
},
"star_history": null,
"open_issues_and_prs": 21
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"packages/agent/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"templates/static-site/tsconfig.json",
"templates/web-app/frontend/tsconfig.json"
],
"toolchain_manifests": [
"packages/agent/go.mod"
],
"largest_source_bytes": 57346,
"source_files_sampled": 260,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md",
"templates/backend-service/AGENT.md",
"templates/backend-service/CLAUDE.md",
"templates/docker/AGENT.md",
"templates/docker/CLAUDE.md",
"templates/static-site/AGENT.md",
"templates/static-site/CLAUDE.md",
"templates/web-app/AGENT.md",
"templates/web-app/CLAUDE.md"
],
"agent_instruction_max_bytes": 16673
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 35,
"malicious_count": 0,
"assessed_package": "pypi:runtm@0.2.132",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 13,
"merged_prs": 23,
"open_issues": 8,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Gustrigos",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/39495859?v=4"
},
{
"type": "User",
"login": "cvolante54",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/28110819?v=4"
},
{
"type": "User",
"login": "jjpd777",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/29438288?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.772
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"lint.yml",
"publish.yml",
"release-agent.yml"
],
"has_docs_dir": true,
"linter_configs": [
".eslintrc.json",
"ruff.toml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 3/25 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "02aea30518314b41688bf59a4717a710a993158d",
"ran_at": "2026-07-27T12:55:21Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T22:36:58Z",
"oldest_open_prs": [
{
"number": 2,
"created_at": "2026-03-19T20:44:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 3,
"created_at": "2026-03-20T04:15:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 6,
"created_at": "2026-03-23T01:42:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 7,
"created_at": "2026-03-23T01:53:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 8,
"created_at": "2026-03-23T02:56:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 9,
"created_at": "2026-03-23T19:11:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 10,
"created_at": "2026-03-26T16:11:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 25,
"created_at": "2026-05-27T05:08:35Z",
"last_comment_at": "2026-06-08T07:42:03Z",
"last_comment_author": "eunseo9311"
},
{
"number": 36,
"created_at": "2026-06-20T15:13:07Z",
"last_comment_at": "2026-06-21T10:54:56Z",
"last_comment_author": "kunaldhongade"
},
{
"number": 37,
"created_at": "2026-06-22T08:08:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-05T16:02:00Z",
"last_comment_at": "2026-07-05T16:02:04Z",
"last_comment_author": "cursor"
},
{
"number": 42,
"created_at": "2026-07-05T16:36:43Z",
"last_comment_at": "2026-07-05T16:36:46Z",
"last_comment_author": "cursor"
},
{
"number": 44,
"created_at": "2026-07-23T19:40:41Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-24T22:35:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 4,
"created_at": "2026-03-21T14:21:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 5,
"created_at": "2026-03-21T14:24:41Z",
"last_comment_at": "2026-05-06T15:15:12Z",
"last_comment_author": "Himanshu-370"
},
{
"number": 16,
"created_at": "2026-05-10T12:34:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 21,
"created_at": "2026-05-24T20:09:58Z",
"last_comment_at": "2026-07-01T12:30:46Z",
"last_comment_author": "Dharshan2004"
},
{
"number": 24,
"created_at": "2026-05-26T19:33:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2026-05-28T10:17:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 27,
"created_at": "2026-05-28T19:33:55Z",
"last_comment_at": "2026-05-30T17:56:56Z",
"last_comment_author": "RishiGoswami-code"
},
{
"number": 28,
"created_at": "2026-06-02T10:59:26Z",
"last_comment_at": "2026-06-15T10:41:10Z",
"last_comment_author": "sanchal-coder"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/runtm-ai/runtm",
"host": "github.com",
"name": "runtm",
"owner": "runtm-ai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"security": 59,
"vitality": 82,
"community": 68,
"governance": 46,
"engineering": 96
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"commits_last_year": 94,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "94 commits in the last year",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 94
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 13,
"latest_release_tag": "packages/agent/v0.0.13",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 4.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 68,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"forks": 31,
"stars": 286,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "286 stars",
"points": 39.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 286
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "31 forks",
"points": 12.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 31
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.772
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 77% of commits",
"points": 5.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 77
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"merged_prs": 23,
"open_issues": 8,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "23/25 decided PRs merged",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 23,
"decided": 25
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/25 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"followers": 14,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "runtm-ai",
"public_repos": 4,
"account_age_days": 223
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "14 followers of runtm-ai",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 14,
"login": "runtm-ai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~0 yr old",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"runtm"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "34 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 34
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 96,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json, ruff.toml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json, ruff.toml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"agent-runtime",
"agentic",
"control-plane",
"ephemeral-environments",
"infra",
"llm-tools",
"llmops",
"observability",
"open-source",
"serverless",
"app-runtime",
"anthropic",
"claude",
"cursor",
"openai",
"claude-code",
"sandbox"
],
"has_wiki": true,
"homepage": "https://www.runtm.com/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.runtm.com/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "18 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 18
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/25 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:runtm@0.2.132 runtime dependency closure — what installing the published package pulls in — 35 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:runtm@0.2.132",
"assessed": 35
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 35,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 35,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 80,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.574,
"agent_instruction_files": [
"CLAUDE.md",
"templates/backend-service/AGENT.md",
"templates/backend-service/CLAUDE.md",
"templates/docker/AGENT.md",
"templates/docker/CLAUDE.md",
"templates/static-site/AGENT.md",
"templates/static-site/CLAUDE.md",
"templates/web-app/AGENT.md",
"templates/web-app/CLAUDE.md"
],
"agent_instruction_max_bytes": 16673
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 94 human commits state their intent (structured subject or explanatory body)",
"points": 30.6,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 94
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"packages/agent/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"templates/static-site/tsconfig.json",
"templates/web-app/frontend/tsconfig.json"
],
"agent_commit_share": 0.351,
"toolchain_manifests": [
"packages/agent/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "packages/agent/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/agent/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json, ruff.toml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json, ruff.toml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "33 of the last 94 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 33,
"sampled": 94
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 57346,
"source_files_sampled": 260,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/260 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 260,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T12:55:37.276985Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/runtm-ai/runtm.svg",
"full_name": "runtm-ai/runtm",
"license_state": "custom",
"license_spdx": null
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit runtm-ai/runtm teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
