shurco / mycart

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

Jeder Punkt umfasst 3 Tage.

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 14 direkte und 60 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 52 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 3 tragen bekannte Advisories, davon 2 direkte. 22 konnten nicht bewertet werden – keine aufgelöste Version, ein nicht unterstütztes Ökosystem, oder außerhalb der ausgewiesenen Paketliste.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [
        "basket",
        "cart",
        "ecommerce",
        "ecommerce-platform",
        "golang",
        "stripe",
        "stripe-payments",
        "shopping-cart",
        "payment",
        "shop",
        "go",
        "commerce",
        "e-commerce",
        "hacktoberfest",
        "cryptocurrency-exchanges",
        "paypal",
        "self-hosted",
        "svelte"
      ],
      "is_fork": false,
      "size_kb": 53082,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 422467,
        "CSS": 9049,
        "HTML": 1046,
        "Shell": 12284,
        "Svelte": 235956,
        "JavaScript": 3071,
        "TypeScript": 54688
      },
      "pushed_at": "2026-07-22T13:15:07Z",
      "created_at": "2023-07-22T14:55:38Z",
      "owner_type": "User",
      "updated_at": "2026-07-22T13:16:26Z",
      "description": "🛒 myCart - shopping cart in 1 file with card and cryptocurrency payment support",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Svelte"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Shurco",
      "type": "User",
      "login": "shurco",
      "company": "@werbot, @netmoth",
      "location": "worldwide",
      "followers": 47,
      "avatar_url": "https://avatars.githubusercontent.com/u/411055?v=4",
      "created_at": "2010-09-22T06:35:03Z",
      "is_verified": null,
      "public_repos": 16,
      "account_age_days": 5782
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-07-17T10:13:16Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-07-02T15:29:43Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-04-07T16:14:57Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-01-27T13:12:36Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-01-04T08:58:43Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-01-04T08:28:15Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-01-01T18:57:49Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2025-12-31T20:32:25Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2025-12-30T20:45:35Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2025-12-30T15:12:33Z"
        },
        {
          "tag": "v0.1.13",
          "kind": "patch",
          "published_at": "2025-06-24T19:14:35Z"
        },
        {
          "tag": "v0.1.12",
          "kind": "patch",
          "published_at": "2024-07-30T11:29:14Z"
        },
        {
          "tag": "v0.1.11",
          "kind": "patch",
          "published_at": "2024-07-07T08:11:52Z"
        },
        {
          "tag": "v0.1.10",
          "kind": "patch",
          "published_at": "2024-01-12T12:30:57Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2023-12-11T14:08:35Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2023-11-30T17:19:46Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2023-11-29T15:27:05Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2023-11-22T19:41:31Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2023-11-20T09:47:59Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2023-10-14T10:25:30Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2023-09-29T12:33:00Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2023-09-19T17:14:33Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2023-09-14T07:17:44Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2023-09-12T20:09:00Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d63b1cf4f766d150de22ad7b385eaf402191ac5c",
          "body": "Feature/portone integration",
          "is_bot": false,
          "headline": "Merge pull request #339 from nikescar/feature/portone-integration",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-22T13:15:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b5f7eb38b14aed0223f1c4551b13da8d3266879",
          "body": "Change cartTotal parameter from float64 to int and logging.Logger to logging.Log to match actual types used in the codebase.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct types in payment validation functions",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T09:02:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a22f210b96e2c03e1468f6bb007bf887e1543d6b",
          "body": "Extract helper functions to reduce complexity from 20→8 (Svelte) and 16→10 (Go):\n- Extract PortOne payment flow, cart creation, and verification logic (Svelte)\n- Extract validation helpers for amount, currency, and cart ID (Go)\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: reduce cyclomatic complexity in payment handlers",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:57:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2f81712da928553de9b26849ba4f63212d999048",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: remove CLAUDE.md from version control",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:45:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "97d00f19e3de6c585aee34f81258b14f1f791eec",
          "body": null,
          "is_bot": false,
          "headline": "chore. removing dev files.",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:41:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d2d03105df4ed0104d29f343138b2a1a9bf3c7a",
          "body": "- Resolve merge conflicts preserving currency warning feature\n- Add Kakao Easypay support notice in PortOne admin settings\n- Fix import path for formatCurrency utility in cart page\n- Add translations for payment restrictions (en, ko, zh)\n- Update .gitignore with build artifacts\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge branch changes and add PortOne payment restrictions",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2780d67f1edf64680e3e2bab8087ba3557f9d8bd",
          "body": "Remove scattered documentation files and consolidate into CLAUDE.md with comprehensive build instructions for all platforms, especially OpenBSD-specific native module builds. Update .gitignore to exclude build artifacts.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: consolidate documentation and update build artifacts",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c20526f7d974a784511dcd216195ffede5eb089d",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct import path for formatCurrency utility",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6379617de2c6a153c7c365a28db22f326f469b3a",
          "body": "- Add debug_enabled checkbox in PortOne settings\n- Add supported_currencies checkboxes (KRW, USD, JPY, EUR, GBP)\n- Update PortoneSettings type with new fields\n- Add English and Korean translations\n- Complete Task 7 implementation",
          "is_bot": false,
          "headline": "feat(admin): add debug toggle and currency multi-select UI for PortOne",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "694770a0406e045ed3e4f7523f90df42c8a5913e",
          "body": "- Test suite for debug mode, currency restrictions, formatting\n- Regression tests for database and API endpoints\n- Covers all functional requirements from spec",
          "is_bot": false,
          "headline": "docs: add manual test checklist for PortOne enhancements",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62324f5bb76b1de4fe81777e779393c6bad78e58",
          "body": "Task 7 (partial): Add KRW to currency options in admin\nTask 8: Add Korean translation \"간편결제 서비스\" for PortOne",
          "is_bot": false,
          "headline": "feat: add KRW currency option and Korean PortOne translation",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffb5e76ca4c9d1da27b56adaba6cf880c99555c4",
          "body": "Tasks 5 & 6 combined:\n- Add debugLog() helper that checks backend debug_enabled flag\n- Replace all console.log calls with debugLog in PortOne flow\n- Remove frontend currency condition (backend now handles filtering)\n- Import and use formatCurrency for cart total display\n- Debug logs only appear when admin enables debug mode\n- Currency symbol integrated into amount display",
          "is_bot": false,
          "headline": "feat(site): add conditional debug logging and currency formatting",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97fc96506d27471a6a61c8a1f87dc4b935463edb",
          "body": "- formatCurrency() handles KRW with locale-specific symbols (₩ vs 원)\n- KRW displays without decimals (3,000 not 3,000.00)\n- Other currencies unchanged (30.00 USD format preserved)\n- Full test coverage with Vitest",
          "is_bot": false,
          "headline": "feat(site): add locale-aware currency formatting utility",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3485f5d7fb7bfd04cd3a5c917f398f651b997e59",
          "body": "- GetPortoneConfig now returns debug_enabled boolean\n- Frontend can conditionally show logs based on this flag\n- API secret still protected (not exposed)",
          "is_bot": false,
          "headline": "feat(portone): expose debug_enabled flag in config endpoint",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6b3ada943835c82b97617085c116303122af542",
          "body": "- PaymentList handler now filters PortOne based on current store currency\n- Provider only shown if currency in supported_currencies array\n- Add test structure (skipped pending integration fixtures)",
          "is_bot": false,
          "headline": "feat(portone): filter provider by supported currencies",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "099567def7243f7d087788296dd007c37b65e16c",
          "body": "- Add DebugEnabled (bool) and SupportedCurrencies ([]string) to Portone model\n- Add migration with defaults: debug=false, currencies=[\"KRW\"]\n- Add validation tests for new fields",
          "is_bot": false,
          "headline": "feat(portone): add debug_enabled and supported_currencies fields",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b45ddb86abfbf3e9e63caa42e963a26a212b9595",
          "body": null,
          "is_bot": false,
          "headline": "fix(portone): change payMethod back to EASY_PAY to match channel config",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9666d969badd2c78a4e31780a84e0c72a2097e35",
          "body": "…ters\n\n- Add /api/cart/create route registration\n- Create cart record before PortOne payment flow\n- Change payMethod from EASY_PAY to CARD\n- Fix customData format (object instead of JSON string)\n- Use real cart_id instead of email for verification",
          "is_bot": false,
          "headline": "fix(portone): add cart create endpoint and fix payment request parame…",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9de049f6a4a3f4419cea11cc2814d4a73df219f",
          "body": null,
          "is_bot": false,
          "headline": "feat: show PortOne payment only for KRW currency",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2024aeb8c8e6ef8d6ac31d3f931a16deff3cee28",
          "body": null,
          "is_bot": false,
          "headline": "fix: correct logging API calls and route ordering for PortOne",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e39cdac783f30b4d7f992b964ea312846518d8c",
          "body": null,
          "is_bot": false,
          "headline": "Fix portone migration: add Goose directives",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57c49cce00d82bbfe5ad1ccb3c6ab46db9b1e62f",
          "body": null,
          "is_bot": false,
          "headline": "chore. gitignore update.",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69c6b9d7d4f4199e199b4fbe9bfbdf1b814bc794",
          "body": "PortOne payment gateway uses browser SDK with iframe-based flow.\nDefault helmet middleware set strict COEP (require-corp) which blocked\ncross-origin iframes. This commit removes COEP header and updates CSP\nto allow PortOne/KakaoPay payment iframes.\n\nChanges:\n- Remove Cross-Origin-Embedder-Policy hea\n[…]\nw\n- Update CSP frame-src to include checkout-service and kakaopay domains\n\nThis fixes NS_ERROR_DOM_COEP_FAILED and CSP violations in Firefox.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(portone): remove COEP header and add CSP for iframe compatibility",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2928adff03456aaa2f6c762c8b7026bd633b3fa8",
          "body": "- Custom nginx image with acmetool for automated certificate management\n- Staging-first workflow with Let's Encrypt\n- Zero-downtime certificate issuance and renewal\n- Graceful fallback to HTTP on certificate failures\n- Comprehensive testing strategy with TDD approach\n- Resource-optimized for <1GB RAM system",
          "is_bot": false,
          "headline": "Add ACME/HTTPS implementation design spec",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45c0bcc3e08aa932211950f2eb8e965e8834c00d",
          "body": "Update mycart image reference to use GitHub Container Registry.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docker): update image registry to ghcr.io",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "411f5f74ede530756a4ef71fe5d6f647414ce598",
          "body": "READY_TO_TEST.md provides:\n- Complete testing overview\n- One-line start command\n- Detailed testing checklist\n- Test scenarios (happy path, errors, config)\n- Verification commands\n- Common issues & solutions\n- Success metrics\n- Next steps\n\nReady for immediate testing!\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add comprehensive testing readiness guide",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a99f2aff19cf30cb131d7e8cd8a925bbe73bc303",
          "body": "Add testing tools:\n- test-portone.sh: automated integration tests\n- QUICK_START.md: one-page quick reference\n\nTests verify:\n- Health check\n- Payment methods API\n- PortOne config endpoint\n- Webhook endpoint\n- Configuration status\n\nQuick start provides:\n- One-line start command\n- 3-step manual guide\n- Troubleshooting tips\n- All access points\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add automated testing and quick start guide",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b636560d3de99c328d7a2c4ddb8dd51c2582a35a",
          "body": "Add comprehensive development environment:\n- Dockerfile.dev for building from source\n- docker-compose.dev.yml for easy setup\n- dev-start.sh quick start script\n- DEV_SETUP.md detailed guide\n- TESTING_PORTONE.md quick testing guide\n\nFeatures:\n- Multi-stage build (frontend + backend)\n- Volume mounting for persistent data\n- Health checks\n- Easy start/stop/logs commands\n- Webhook testing instructions\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add development Docker setup for testing PortOne",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "691284490cfe2c17255d086d753a4acbf8b9bc43",
          "body": "Summary includes:\n- All 15 completed tasks\n- Architecture overview\n- Security features\n- Testing checklist\n- Deployment notes\n- Next steps\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add comprehensive PortOne implementation summary",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4c12250dd24faf37f587dd9ac22617edbf438e02",
          "body": "Document automatic migration process.\nProvide manual migration instructions if needed.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add PortOne migration notes",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f96564e072e2793229907360024d0dded64fc67a",
          "body": "Add PortOne to API documentation with endpoints.\nAdd PortOne setup guide to payment customization.\nUpdate README with PortOne in provider list.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add PortOne payment gateway documentation",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "30188a2b02708758a8e07acaa3ccae0bb713efdb",
          "body": "Import PortOne browser SDK.\nLoad PortOne config on mount.\nAdd PortOne payment option UI.\nImplement PortOne payment handler.\nVerify payment with backend after completion.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): integrate PortOne payment in cart page",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7d168304f5be03206da1687fa80c84ff1bb66448",
          "body": "Add English and Chinese translations for PortOne.\nAdd portone to PROVIDER_KEYS array.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): add PortOne translations and payment util",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5956a4caaf2e6e8dc0ee2e917ddca0f9cda48db6",
          "body": "Install @portone/browser-sdk package.\nAdd portone to PaymentMethods interface.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): install PortOne browser SDK and add types",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "924ce3b4df3d671b6c5960ee39af8dd1d7e80dd8",
          "body": "Add PortOne payment card to provider list.\nAdd PortOne drawer mode.\nWire up Portone component.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): integrate PortOne into payment settings page",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a345cad22e0902bae37c36d9e6201c9bc8d9c2e9",
          "body": "Add Portone.svelte component for admin settings.\nIncludes form validation and active toggle.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): add PortOne settings component",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f8c19214b0fecc2d032b346abb242e7c6d000660",
          "body": "Add English and Chinese translations for PortOne settings.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): add PortOne translations",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "61aabd4f643ad9d77f71f9a4cfd6ae7d58b8ec11",
          "body": "Add PortoneSettings interface.\nAdd validation constants and error messages.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): add PortOne TypeScript types and validation",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ca520f7a8c6f32a7832daadb44f099273a0b9d86",
          "body": "Add POST /api/payment/portone/webhook endpoint.\nVerify webhook signature using HMAC-SHA256.\nProcess payment notifications asynchronously.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(handlers): add PortOne webhook endpoint",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1a636b0ad0ac5deb1223ee55c1d5cfdfbac0b438",
          "body": "Add POST /api/payment/portone/complete endpoint.\nVerify payment with PortOne API.\nValidate amount, currency, cart_id match.\nUpdate cart status to paid on success.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(handlers): add PortOne payment verification endpoint",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c12eab2d98a8031ae9bfcbddadcf606b78380ad9",
          "body": "Add GET /api/cart/portone-config endpoint.\nReturns store_id and channel_key (not api_secret).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(handlers): add PortOne public config endpoint",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b3d666323b3d9f87018f5a53e2a04c41d9463071",
          "body": "Enable GET/PUT /api/private/setting/portone endpoints.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(handlers): register Portone in settings registry",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5a68fe90c345b75063479f6ad201ac50c0be2c80",
          "body": "Add Portone field mapping in GroupFieldMap.\nInclude portone_active in cart payment methods query.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(queries): add Portone to settings and payment methods",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6d2ac1fd0462458025038f8f8a2a03d90114d965",
          "body": "Add Portone struct with validation:\n- StoreID: 24-50 chars\n- ChannelKey: 20-100 chars\n- ApiSecret: 30-200 chars\n- Active: boolean\n\nAdd migration for portone settings in database.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(models): add Portone payment gateway settings",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "151304bc01d4aa0b0e0760d38ce9ef673edcf0dd",
          "body": "Add comprehensive design document for PortOne payment gateway integration.\n\nArchitecture:\n- Browser SDK-driven flow (unlike server-initiated Stripe/PayPal)\n- Backend verification via PortOne REST API\n- Bypasses pkg/litepay abstraction\n\nComponents:\n- Data model: Portone settings struct + migration\n- \n[…]\n\n\nSecurity:\n- Server-side payment verification required\n- Webhook signature validation\n- Amount/currency/cart_id validation before completion\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "📝 docs(design): add PortOne payment gateway integration spec",
          "author_name": "root",
          "author_login": null,
          "committed_at": "2026-07-22T08:29:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b444c55288191b81c66ac764eeb5e5a1a2eab813",
          "body": "…/setup-go-7\n\n🔧 build(deps): bump actions/setup-go from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #334 from shurco/dependabot/github_actions/actions…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-19T07:43:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5653294e1d7b73c414819ec488b1af2630bd643",
          "body": "Add Korean language support",
          "is_bot": false,
          "headline": "Merge pull request #337 from nikescar/add-krw-korean-support",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-19T07:42:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce2f20644ff9f6967f6fe5e32c09cf958a5be96d",
          "body": "Added translations for:\n- Payment page: Payment providers, payment settings\n- Page admin: Position, footer, type content here, SEO fields (Title, Keywords, Description), Page status updated\n- Product admin: Digital file description, Amount, Metadata, Attributes, Images, Short description, Brief\n- Form: Please select\n- Digital: File and data descriptions\n\nAll admin pages now fully translated to Korean.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(admin): add complete Korean translations for all admin pages",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "be5cc4f19e03b90e0a876367dd7e4170b0109348",
          "body": "Added translations for:\n- Amount (금액)\n- Digital type (디지털 타입)\n- Metadata (메타데이터)\n- Attributes (속성)\n- Short description (간단한 설명)\n- Brief (요약)\n- Add metadata/attribute records\n- All product form fields\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(admin): add missing Korean translations for product form",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "21ee40efaa346a38e30f6f0820079c646d3b7a28",
          "body": "- Add ko.json with full Korean translations for admin\n- Update Locale type to include ko\n- Add Korean to language switcher\n- Update localStorage validation\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): add Korean language support",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bcc6c7dbae730afebe36a6f3535dece7ac1ac96b",
          "body": "- Add ko.json with full Korean translations\n- Update Locale type to include ko\n- Add Korean to language switcher\n- Update localStorage validation\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): add Korean language support",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a4a874b2f176b782154fb4fcb9c303782771b7f4",
          "body": "Cart amounts now display with proper currency symbols and formatting.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): use formatCurrency in carts list",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fca747aa069ad04f866ee0f5f148a4a1765edd0b",
          "body": "Order confirmation now shows properly formatted currency.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): use formatCurrency in payment success page",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e0e3c2db5b4b6301f9c4d6cab90d79004891f5b7",
          "body": "Currency amounts now show proper symbols and decimal formatting.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): use formatCurrency in cart display",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0804e8444aca85376b5a2a0a7fe8103988782ab4",
          "body": "Use CURRENCIES config instead of hardcoded array.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): add KRW to currency dropdown",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fed95a6e0c13dde2aa0978068af0485eab4d9363",
          "body": "Copy of site utilities for admin build isolation.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(admin): add currency configuration and formatting",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a422351011928d4e25729159bbd875ee11a62b8e",
          "body": "Supports proper decimal handling:\n- KRW/JPY: 0 decimals with thousands separator\n- USD/EUR/etc: 2 decimals\n- Unknown currencies: fallback format\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): add currency formatting utility",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9d3e3663f600f9afb4103c06e3fa348f86f2a87a",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): add currency configuration with KRW support",
          "author_name": "Woojae, Park",
          "author_login": "nikescar",
          "committed_at": "2026-07-17T21:27:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2e274d79279b734eca84a2902666e1ca7d10adb8",
          "body": "…hange-not-propigated-to-docker-hub\n\n🐛 fix(ci): publish mycart Docker image to Docker Hub",
          "is_bot": false,
          "headline": "Merge pull request #336 from shurco/335-bug-litecart-to-mycart-name-c…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-17T10:06:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bdeb71cc969e5ace761097f09fb6d496fde21ae",
          "body": "Changes made in this commit:\n- Modified: .github/workflows/release.yml, .goreleaser.yml\n- Added: .github/workflows/docker-hub-publish.yml\n\nKey changes:\n- Consolidate dockers_v2 into a single build for Docker Hub and GHCR\n- Disable SBOM and provenance attestations for Docker Hub compatibility\n- Confi\n[…]\no Docker Hub\n\nFixes the missing shurco/mycart repository on Docker Hub after the\nlitecart to myCart rename. GHCR already published images; Docker Hub\ndid not receive updates since v0.2.7.\n\nCloses #335",
          "is_bot": false,
          "headline": "🐛 fix(ci): publish mycart Docker image to Docker Hub",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-17T10:05:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5227e52dfc3ca9259530f87647ce7178a4028eca",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): bump actions/setup-go from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T22:23:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86cf5b7d00eaf308bcf336793e72233710265c5e",
          "body": "Changes made in this commit:\n- Modified: .gitignore, go.mod, go.sum, web/admin/bun.lockb, web/admin/package.json, web/site/bun.lockb, web/site/package.json\n\nKey changes:\n- Add graphify-out directory to .gitignore\n- Bump Go dependencies: Fiber v3.4.0, goose, modernc.org/sqlite, golang.org/x/*\n- Bump SvelteKit, Svelte, Vite, Tailwind, and related frontend packages in admin and site",
          "is_bot": false,
          "headline": "🔧 chore(deps): bump Go and frontend dependencies",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T15:23:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be6b94f99bfedcc4631b1e6bf0e602525d2f2fbb",
          "body": "…ublic-site-despite-active1-and-stripe-configured\n\n🐛 fix(products): show active products on public storefront",
          "is_bot": false,
          "headline": "Merge pull request #331 from shurco/308-bug-products-not-visible-on-p…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T15:20:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b1e805b8adb0ac2919edb1de3a5e5d578920177",
          "body": "Changes made in this commit:\n- Modified: internal/queries/products.go\n- Modified: internal/queries/products_test.go\n- Modified: internal/handlers/public/product_test.go\n\nKey changes:\n- List public products by active/deleted status instead of digital inventory\n- Add publicProductFilter helper for cat\n[…]\nd regression tests for products without digital content and api type\n\nFixes the empty storefront catalog on fresh installs where active products\nhad no uploaded digital keys or files yet.\n\nCloses #308",
          "is_bot": false,
          "headline": "🐛 fix(products): show active products on public storefront",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T15:18:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "70f627bc194429ce78eecaa50c02b0f7b4443130",
          "body": "🐛 fix(products): allow free products with zero amount",
          "is_bot": false,
          "headline": "Merge pull request #330 from shurco/307-bug-cant-add-free-product",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T14:57:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a31504349fb9ad4051e72ea074c373386af15b81",
          "body": "Changes made in this commit:\n- Modified: internal/models/products.go, internal/models/products_test.go, internal/handlers/private/product_test.go\n\nKey changes:\n- Remove validation.Required from Product.Amount (0 was treated as blank)\n- Keep validation.Min(0) to reject negative prices\n- Add model and handler tests for free products\n\nFixes #307",
          "is_bot": false,
          "headline": "🐛 fix(products): allow free products with zero amount",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T14:56:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67c287559df9bcd5eba516c664845d76efba4d2b",
          "body": "…account-using-docker-compose\n\n✨ feat(install): add CLI install command and install status API",
          "is_bot": false,
          "headline": "Merge pull request #329 from shurco/297-question-how-to-create-admin-…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T14:48:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5700f9e57b6fed953812e659e3167a1382ca743",
          "body": "Changes made in this commit:\n- Modified: README.md, cmd/main.go, internal/app.go, internal/app_test.go, internal/handlers/private/install.go, internal/handlers/private/install_extra_test.go, internal/queries/install.go, internal/routes/api_private_routes.go, k8s/litecart.yaml, web/admin/src/routes/+\n[…]\ntalled\n- Document docker-compose install flow in README and add K8s Job manifest\n\nEnables first-time admin account creation in scratch-based container images\nwithout an interactive shell.\n\nCloses #297",
          "is_bot": false,
          "headline": "✨ feat(install): add CLI install command and install status API",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-02T14:47:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3a42588b59ae9a19e3abb51d03852fb52e7894f9",
          "body": "…/checkout-7\n\n🔧 build(deps): Bump actions/checkout from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #326 from shurco/dependabot/github_actions/actions…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-07-01T06:53:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3365ad8f50886857234c87451e00bc8a74ec733",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump actions/checkout from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-18T22:22:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97ff66f95740ec253ab635eca546b5e73080ee84",
          "body": "Changes made in this commit:\n- Modified: README.md,internal/handlers/private/cart.go,internal/handlers/private/install.go,internal/handlers/private/page.go,internal/handlers/private/product.go,internal/handlers/private/setting.go,internal/handlers/public/product.go,internal/middleware/jwt.go,interna\n[…]\nviders for testability\n- Sanitize rich HTML in admin/site Svelte views; refresh Bun lockfiles and package metadata\n- Add progressive-disclosure AGENTS.md under root, internal, migrations, pkg, and web",
          "is_bot": false,
          "headline": "🧪 test(repo): expand Go tests, web sanitization, and AGENTS docs",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-04-18T10:19:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e30338cd433b8b529d52b66dcf78bee6e3f3c063",
          "body": "Changes made in this commit:\n- Modified: go.mod, go.sum, web/admin/package.json, web/admin/bun.lockb, web/site/package.json, web/site/bun.lockb\n- Added: none\n- Deleted: none\n\nKey changes:\n- Bump backend Go dependencies including zerolog, sqlite, fasthttp, and x/image\n- Update SvelteKit, Svelte, Vite\n[…]\nnd Node type dependencies in both web modules\n- Regenerate Bun lockfiles for admin and site packages to align with updated versions\n\nSynchronize dependency versions across backend and frontend stacks.",
          "is_bot": false,
          "headline": "🔧 chore(deps): update Go and Svelte dependencies",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-04-07T16:23:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce6bfc9e70444e9ead186fcb947ec86b2183b802",
          "body": "…cancel-workflow-action-0.13.1\n\n🔧 build(deps): Bump styfle/cancel-workflow-action from 0.13.0 to 0.13.1",
          "is_bot": false,
          "headline": "Merge pull request #289 from shurco/dependabot/github_actions/styfle/…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-04-07T16:19:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d72f657399cbdea8e34922ed36faa98b2fa4f3f",
          "body": "Changes made in this commit:\n- Modified: .github/CONTRIBUTING.md, .github/ISSUE_TEMPLATE/bug-report.yaml, .github/ISSUE_TEMPLATE/feature-request.yaml, .github/ISSUE_TEMPLATE/question.yaml, .github/SECURITY.md, .github/media/banner.png, .gitignore, .goreleaser.yml, Dockerfile.goreleaser, README.md, c\n[…]\nation guide for users moving from litecart\n- Align Docker, nginx, Kubernetes, GoReleaser, install script, and web UIs\n- Update handlers, queries, routes, mailer, JWT, webhooks, tests, and litepay docs",
          "is_bot": false,
          "headline": "♻️ refactor(project): rebrand from litecart to myCart",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-04-07T16:07:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c22424b62ff9426c79befa8eb94839b8e1ee3488",
          "body": "Changes made in this commit:\n- Modified: README.md, docs/payment-customization.md, go.mod, go.sum, internal/app.go, internal/handlers/private/*.go, internal/handlers/public/*.go, internal/middleware/*.go, internal/models/setting.go, internal/queries/*.go, internal/routes/*.go, internal/testutil/test\n[…]\nh broader test coverage\n- Add admin payment settings UI for Coinbase and update storefront checkout/cart payment mapping\n- Refresh API documentation and payment customization docs for the new provider",
          "is_bot": false,
          "headline": "✨ feat(payment): add Coinbase provider across API and storefront",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-03-19T23:05:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f0af9846f8ed813e3edea16555db9db4553141c",
          "body": "Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) from 0.13.0 to 0.13.1.\n- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)\n- [Commits](https://github.com/styfle/cancel-workflow-action/compare/0.13.0...0.13.1)\n\n---\nupdated-dependencies:\n[…]\name: styfle/cancel-workflow-action\n  dependency-version: 0.13.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump styfle/cancel-workflow-action from 0.13.0 to 0.13.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-11T22:23:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b9db0a008737a191bfb577b67f70f861c2bcfaa",
          "body": "…setup-qemu-action-4\n\n🔧 build(deps): Bump docker/setup-qemu-action from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #285 from shurco/dependabot/github_actions/docker/…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-03-06T06:34:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95a364056d7eb119f8707654ab6a4c376961395f",
          "body": "…login-action-4\n\n🔧 build(deps): Bump docker/login-action from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #286 from shurco/dependabot/github_actions/docker/…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-03-06T06:34:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aff29451cbda998b588f3b5b68d90bda42319acc",
          "body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/setup-qemu-action\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump docker/setup-qemu-action from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-06T06:18:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "386c3eae52b7b8ba3c750fc96bbc18e15010b969",
          "body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/login-action\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump docker/login-action from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-06T06:18:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58d77a3f0da99076e0e0631f7e1e12f450ed7a1c",
          "body": "…ax/ghaction-upx-4\n\n🔧 build(deps): Bump crazy-max/ghaction-upx from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #284 from shurco/dependabot/github_actions/crazy-m…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-03-06T06:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45cb18dea3bc29b0bd206a106bd7b911e7e552ba",
          "body": "…setup-buildx-action-4\n\n🔧 build(deps): Bump docker/setup-buildx-action from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #287 from shurco/dependabot/github_actions/docker/…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-03-06T06:18:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b8b97926a0f1bd4dd6f1fdca85a21072a46bb8a",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/setup-buildx-action\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump docker/setup-buildx-action from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-05T22:23:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43864031b9c11186acf9be5ba377bc3c5cc53d3e",
          "body": "Bumps [crazy-max/ghaction-upx](https://github.com/crazy-max/ghaction-upx) from 3 to 4.\n- [Release notes](https://github.com/crazy-max/ghaction-upx/releases)\n- [Commits](https://github.com/crazy-max/ghaction-upx/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: crazy-max/ghaction-upx\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump crazy-max/ghaction-upx from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-02T23:48:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9a31b858ee62e6466ae893101ad20c24e27b646",
          "body": "…ser/goreleaser-action-7\n\n🔧 build(deps): Bump goreleaser/goreleaser-action from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #281 from shurco/dependabot/github_actions/gorelea…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-02-27T10:11:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9de72c12f4b29322bd7936e26f91162b89b68a4f",
          "body": "Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6 to 7.\n- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)\n- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: goreleaser/goreleaser-action\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump goreleaser/goreleaser-action from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-23T23:29:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "915e1051a44b7fc583cc3952ad1dcdeeb2fe532c",
          "body": "Changes made in this commit:\n\n- Added: pkg/litepay/README.md\n- Added: pkg/litepay/CHEATSHEET.md\n- Added: pkg/litepay/example_test.go\n- Added: docs/payment-customization.md\n- Modified: pkg/litepay/litepay.go\n- Modified: pkg/litepay/provider.go\n- Modified: pkg/litepay/cart.go\n- Modified: pkg/litepay/h\n[…]\n)\n- Add godoc comments to all exported types and functions\n- Translate all documentation to English\n- Document provider implementation patterns\n- Include security best practices and testing guidelines",
          "is_bot": false,
          "headline": "📚 docs(litepay): add comprehensive documentation package",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-27T14:17:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3bb28ff33f5c0cf76934d8af7f3f4d2c13e1e3c1",
          "body": "…tall-page-on-500-errors-when-installing\n\n🐛 fix(api): prevent incorrect redirect to install page on GitHub API …",
          "is_bot": false,
          "headline": "Merge pull request #272 from shurco/271-bug-incorrect-redirect-to-ins…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-27T13:07:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e02870cad5f40278d7f834fda39f17b0632b3594",
          "body": "…rate limit\n\nChanges made in this commit:\n- Modified: internal/handlers/private/setting.go\n- Modified: web/admin/src/routes/+layout.ts\n\nKey changes:\n- Handle GitHub API errors gracefully in Version handler\n- Continue without update information when GitHub API is unavailable\n- Remove incorrect 500 st\n[…]\nirecting users to the\ninstallation page. Backend middleware InstallCheck already\nhandles installation status checks, so frontend should not\nassume 500 errors mean the app is not installed.\n\nFixes #271",
          "is_bot": false,
          "headline": "🐛 fix(api): prevent incorrect redirect to install page on GitHub API …",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-27T13:05:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0fc48333055a5258c600dcdbfeb2752a2545fd7",
          "body": "…cancel-workflow-action-0.13.0\n\n🔧 build(deps): Bump styfle/cancel-workflow-action from 0.12.1 to 0.13.0",
          "is_bot": false,
          "headline": "Merge pull request #268 from shurco/dependabot/github_actions/styfle/…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-21T07:50:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51b33e10cf1e8c7a3cb5792e63274198b9213cbd",
          "body": "Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) from 0.12.1 to 0.13.0.\n- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)\n- [Commits](https://github.com/styfle/cancel-workflow-action/compare/0.12.1...0.13.0)\n\n---\nupdated-dependencies:\n[…]\name: styfle/cancel-workflow-action\n  dependency-version: 0.13.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "🔧 build(deps): Bump styfle/cancel-workflow-action from 0.12.1 to 0.13.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-15T22:23:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27a2bb915d5fa4d90ed8d4a149a89960c405bc7c",
          "body": "Changes made in this commit:\n\n- Modified: web/admin/src/routes/signin/+page.svelte\n- Modified: web/admin/src/routes/install/+page.svelte\n\nKey changes:\n\n- Replace let declarations with $state() for reactive variables (email, password, domain, error fields)\n- Fix event handler by making event paramete\n[…]\nduplicate preventDefault() calls in form handlers\n\nFixes Svelte 5 compilation warnings about non-reactive updates and\nresolves runtime error 'undefined is not an object (evaluating e.preventDefault)'.",
          "is_bot": false,
          "headline": "🐛 fix(admin): fix Svelte 5 reactivity and event handler errors",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-04T08:52:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5a28f8e2d448c562fa4499513936c5eecddf126",
          "body": "Changes made in this commit:\n\n- Modified: web/site/src/lib/components/ProductCard.svelte\n- Modified: web/site/src/lib/i18n/locales/en.json\n- Modified: web/site/src/lib/i18n/locales/zh.json\n- Modified: web/site/src/lib/layouts/MainLayout.svelte\n- Modified: docs/customization.md\n- Added: web/site/src/\n[…]\nsent not given\n- Allows users to accept or reject cookies\n- Persists user choice in localStorage\n- Does not show banner again after user makes a choice\n- Supports multiple languages (English, Chinese)",
          "is_bot": false,
          "headline": "✨ feat(cookies): add GDPR-compliant cookie consent banner",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-04T08:43:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "876fb2cce728447f772514c9e55b22baacad97b6",
          "body": "…and-more-currency-support\n\n🐛 fix(i18n): fix untranslated texts and remove unused translation keys",
          "is_bot": false,
          "headline": "Merge pull request #263 from shurco/28-feature-more-language-support-…",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-04T08:19:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "974b50b0214a70d0bd5a3f552a5e16b7812d0c3a",
          "body": "Changes made in this commit:\n\n- Modified: web/admin/src/lib/components/Pagination.svelte\n- Modified: web/admin/src/lib/components/cart/View.svelte\n- Modified: web/admin/src/lib/components/form/Select.svelte\n- Modified: web/admin/src/lib/components/page/Seo.svelte\n- Modified: web/admin/src/lib/compon\n[…]\nr letter legend items (Site name, Amount of payment, etc.)\n- Add missing translations for popup messages (Status updated, Data saved, etc.)\n- Update README.md with multi-language support documentation",
          "is_bot": false,
          "headline": "🐛 fix(i18n): fix untranslated texts and remove unused translation keys",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-04T08:16:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd4f0e0d51c39ac51d33edc2ac58afed9a5b8e85",
          "body": "…cript config\n\nChanges made in this commit:\n- Modified: web/admin/src/lib/layouts/Main.svelte\n- Modified: web/admin/src/routes/settings/+page.ts\n- Modified: web/admin/tsconfig.json\n- Modified: web/site/src/lib/components/Footer.svelte\n- Modified: web/site/src/lib/components/Overlay.svelte\n- Modified\n[…]\nration to support allowJs and checkJs\n- Fix prop syntax in components (error={error} instead of {error})\n- Add tsconfig.json for web/site project\n- Update page store usage to use new state API pattern",
          "is_bot": false,
          "headline": "♻️ refactor(frontend): migrate to Svelte 5 state API and update TypeS…",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-03T20:31:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b02cd3587bdde31073951bb92263ca0d9d77bad",
          "body": "Changes made in this commit:\n- Modified: web/site/src/lib/components/Footer.svelte\n\nKey changes:\n- Add isActive function to check current page URL\n- Import page store from $app/stores for route detection\n- Apply conditional classes for active menu item (yellow background and black text)\n- Active menu item highlights when user navigates to corresponding page\n\nThis improves UX by providing visual feedback about the current page location in the footer navigation.",
          "is_bot": false,
          "headline": "✨ feat(ui): add active state for footer menu items",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-03T19:47:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8936b0f812e35946fb16987ec59bbbdecb4b1a46",
          "body": "Changes made in this commit:\n\n- Modified: internal/queries/products.go\n- Modified: internal/handlers/private/product.go\n- Modified: internal/handlers/public/product.go\n- Modified: internal/handlers/private/cart.go\n- Modified: internal/handlers/public/cart.go\n- Modified: web/admin/src/routes/products\n[…]\nstorage.\n\nThe digital icon was turning red after price changes because digital.filled was not included in Product method response. Now it's calculated for private queries and preserved during updates.",
          "is_bot": false,
          "headline": "🐛 fix(products): fix price calculation and digital icon display",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-03T18:48:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11f401c8431e23d7ff6d1263a15c979559a11faf",
          "body": "✨ feat(pagination): add pagination support for products, pages, and c…",
          "is_bot": false,
          "headline": "Merge pull request #262 from shurco/44-feature-add-pagination",
          "author_name": "Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-03T16:18:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1116550b30319efa1c6d24cb9e7a860a20476c56",
          "body": "…arts\n\nChanges made in this commit:\n\n- Modified: internal/handlers/private/cart.go, internal/handlers/private/page.go, internal/handlers/private/product.go\n- Modified: internal/handlers/public/cart.go, internal/handlers/public/product.go, internal/handlers/public/setting.go\n- Modified: internal/quer\n[…]\ne 5 runes mode warnings (use $state() for reactive variables, replace svelte:component)\n- Add cursor-pointer style to pagination buttons\n- Maintain backward compatibility (limit=0 returns all records)",
          "is_bot": false,
          "headline": "✨ feat(pagination): add pagination support for products, pages, and c…",
          "author_name": "Dmitry Shurco",
          "author_login": "shurco",
          "committed_at": "2026-01-03T16:15:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 24,
      "commits_last_year": 126,
      "latest_release_at": "2026-07-17T10:13:16Z",
      "latest_release_tag": "v0.2.9",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 22,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 22.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/shurco/mycart",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/shurco/mycart",
          "is_deprecated": false,
          "latest_version": "v0.2.9",
          "repository_url": "https://github.com/shurco/mycart",
          "versions_count": 24,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T10:06:46Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 49,
      "stars": 357,
      "watchers": 4,
      "fork_history": {
        "days": [
          {
            "date": "2023-09-06",
            "count": 1
          },
          {
            "date": "2023-09-18",
            "count": 1
          },
          {
            "date": "2023-09-23",
            "count": 4
          },
          {
            "date": "2023-09-24",
            "count": 1
          },
          {
            "date": "2023-09-25",
            "count": 1
          },
          {
            "date": "2023-09-28",
            "count": 1
          },
          {
            "date": "2023-10-05",
            "count": 1
          },
          {
            "date": "2023-10-08",
            "count": 1
          },
          {
            "date": "2023-10-31",
            "count": 1
          },
          {
            "date": "2023-11-26",
            "count": 1
          },
          {
            "date": "2023-12-17",
            "count": 1
          },
          {
            "date": "2023-12-18",
            "count": 1
          },
          {
            "date": "2023-12-25",
            "count": 1
          },
          {
            "date": "2024-01-25",
            "count": 1
          },
          {
            "date": "2024-01-28",
            "count": 1
          },
          {
            "date": "2024-05-11",
            "count": 1
          },
          {
            "date": "2024-05-14",
            "count": 1
          },
          {
            "date": "2024-05-18",
            "count": 1
          },
          {
            "date": "2024-06-03",
            "count": 2
          },
          {
            "date": "2024-06-04",
            "count": 1
          },
          {
            "date": "2024-07-25",
            "count": 1
          },
          {
            "date": "2024-07-27",
            "count": 1
          },
          {
            "date": "2024-08-24",
            "count": 1
          },
          {
            "date": "2024-09-03",
            "count": 1
          },
          {
            "date": "2024-09-10",
            "count": 1
          },
          {
            "date": "2024-10-06",
            "count": 1
          },
          {
            "date": "2024-10-07",
            "count": 1
          },
          {
            "date": "2024-11-03",
            "count": 1
          },
          {
            "date": "2024-11-04",
            "count": 1
          },
          {
            "date": "2024-11-14",
            "count": 1
          },
          {
            "date": "2024-11-22",
            "count": 1
          },
          {
            "date": "2025-01-30",
            "count": 1
          },
          {
            "date": "2025-03-09",
            "count": 1
          },
          {
            "date": "2025-06-13",
            "count": 1
          },
          {
            "date": "2025-06-14",
            "count": 1
          },
          {
            "date": "2025-07-02",
            "count": 1
          },
          {
            "date": "2025-07-10",
            "count": 1
          },
          {
            "date": "2025-08-29",
            "count": 1
          },
          {
            "date": "2025-10-08",
            "count": 1
          },
          {
            "date": "2025-10-12",
            "count": 1
          },
          {
            "date": "2025-11-02",
            "count": 1
          },
          {
            "date": "2025-11-03",
            "count": 1
          },
          {
            "date": "2025-12-30",
            "count": 1
          },
          {
            "date": "2026-04-13",
            "count": 1
          },
          {
            "date": "2026-07-14",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 49,
        "total_forks": 49
      },
      "star_history": null,
      "open_issues_and_prs": 21
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "sample"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "web/admin/tsconfig.json",
        "web/site/tsconfig.json"
      ],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 22248,
      "source_files_sampled": 217,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "internal/AGENTS.md",
        "migrations/AGENTS.md",
        "pkg/AGENTS.md",
        "web/AGENTS.md"
      ],
      "agent_instruction_max_bytes": 4960
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/disintegration/imaging",
            "direct": true,
            "version": "v1.6.2",
            "severity": "low",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-q7pp-wcgr-pffx"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 1051
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 14
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 8
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "unknown": 2
        },
        "advisory_count": 3,
        "affected_count": 3,
        "assessed_count": 52,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 22,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/disintegration/imaging",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.2"
        },
        {
          "name": "github.com/go-ozzo/ozzo-validation/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.3.0"
        },
        {
          "name": "github.com/gofiber/contrib/v3/jwt",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.7"
        },
        {
          "name": "github.com/gofiber/contrib/v3/zerolog",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/gofiber/fiber/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.4.0"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/pressly/goose/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.27.2"
        },
        {
          "name": "github.com/rs/zerolog",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.35.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/xhit/go-simple-mail/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.16.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.53.0"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.53.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/disintegration/imaging",
            "direct": true,
            "version": "v1.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ozzo/ozzo-validation/v4",
            "direct": true,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/contrib/v3/jwt",
            "direct": true,
            "version": "v1.1.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/contrib/v3/zerolog",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/fiber/v3",
            "direct": true,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pressly/goose/v3",
            "direct": true,
            "version": "v3.27.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/zerolog",
            "direct": true,
            "version": "v1.35.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xhit/go-simple-mail/v2",
            "direct": true,
            "version": "v2.16.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": true,
            "version": "v1.53.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20230301143203-a9d515a09cc2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-test/deep",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/schema",
            "direct": false,
            "version": "v1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/utils/v2",
            "direct": false,
            "version": "v2.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kr/text",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mfridman/interpolate",
            "direct": false,
            "version": "v0.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/micahparks/keyfunc/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/philhofer/fwd",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sethvargo/go-retry",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tinylib/msgp",
            "direct": false,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/toorop/go-dkim",
            "direct": false,
            "version": "v0.0.0-20250226130143-9025cce95817",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/bytebufferpool",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/fasthttp",
            "direct": false,
            "version": "v1.72.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/image",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.73.5",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "@portone/browser-sdk",
            "direct": false,
            "version": "^0.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@sveltejs/adapter-static",
            "direct": false,
            "version": "^3.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "@sveltejs/kit",
            "direct": false,
            "version": "^2.69.0",
            "ecosystem": "npm"
          },
          {
            "name": "@sveltejs/vite-plugin-svelte",
            "direct": false,
            "version": "^5.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/forms",
            "direct": false,
            "version": "0.5.11",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/vite",
            "direct": false,
            "version": "^4.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "@tiptap/core",
            "direct": false,
            "version": "^2.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@tiptap/extension-placeholder",
            "direct": false,
            "version": "^2.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@tiptap/pm",
            "direct": false,
            "version": "^2.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@tiptap/starter-kit",
            "direct": false,
            "version": "^2.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "^25.9.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/nprogress",
            "direct": false,
            "version": "^0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "autoprefixer",
            "direct": false,
            "version": "^10.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "isomorphic-dompurify",
            "direct": false,
            "version": "^3.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "nprogress",
            "direct": false,
            "version": "^0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "^3.9.4",
            "ecosystem": "npm"
          },
          {
            "name": "prettier-plugin-svelte",
            "direct": false,
            "version": "^3.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "prettier-plugin-tailwindcss",
            "direct": false,
            "version": "^0.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "svelte",
            "direct": false,
            "version": "^5.56.4",
            "ecosystem": "npm"
          },
          {
            "name": "svelte-french-toast",
            "direct": false,
            "version": "^1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tailwindcss",
            "direct": false,
            "version": "4.1.18",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "^5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "^7.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "vite-plugin-svelte-svg",
            "direct": false,
            "version": "^2.3.0",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 74,
        "direct_count": 14,
        "indirect_count": 60
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 5,
        "merged_prs": 134,
        "open_issues": 16,
        "closed_ratio": 0.746,
        "closed_issues": 47,
        "closed_unmerged_prs": 135
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "shurco",
          "commits": 299,
          "avatar_url": "https://avatars.githubusercontent.com/u/411055?v=4"
        },
        {
          "type": "User",
          "login": "nikescar",
          "commits": 34,
          "avatar_url": "https://avatars.githubusercontent.com/u/124398?v=4"
        },
        {
          "type": "User",
          "login": "jesuisdolfin",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/97931189?v=4"
        },
        {
          "type": "User",
          "login": "msalbrain",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/86796849?v=4"
        },
        {
          "type": "User",
          "login": "Yonas16",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/157176061?v=4"
        },
        {
          "type": "User",
          "login": "aishacmohamed",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/172533928?v=4"
        },
        {
          "type": "User",
          "login": "sarff",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/30344665?v=4"
        },
        {
          "type": "User",
          "login": "kaichaosun",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/10568673?v=4"
        },
        {
          "type": "User",
          "login": "majiayu000",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/19658300?v=4"
        }
      ],
      "contributors_sampled": 9,
      "top_contributor_share": 0.847
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "analyze.yml",
        "docker-hub-publish.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "bun.lockb",
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 3,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d63b1cf4f766d150de22ad7b385eaf402191ac5c",
        "ran_at": "2026-07-22T19:52:06Z",
        "aggregate_score": 6.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T13:17:00Z",
      "oldest_open_prs": [
        {
          "number": 303,
          "created_at": "2026-04-20T23:35:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 320,
          "created_at": "2026-05-22T22:23:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 332,
          "created_at": "2026-07-08T22:22:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 333,
          "created_at": "2026-07-16T22:22:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 338,
          "created_at": "2026-07-22T07:22:32Z",
          "last_comment_at": "2026-07-22T13:18:53Z",
          "last_comment_author": "shurco"
        }
      ],
      "last_merged_pr_at": "2026-07-22T13:15:07Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 45,
          "created_at": "2023-10-13T13:54:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 47,
          "created_at": "2023-10-13T13:55:32Z",
          "last_comment_at": "2024-08-25T01:58:51Z",
          "last_comment_author": "lemonnn-8"
        },
        {
          "number": 48,
          "created_at": "2023-10-13T13:55:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 49,
          "created_at": "2023-10-13T13:55:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 88,
          "created_at": "2024-01-09T04:50:16Z",
          "last_comment_at": "2025-03-09T01:59:50Z",
          "last_comment_author": "socksprox"
        },
        {
          "number": 92,
          "created_at": "2024-01-24T14:05:41Z",
          "last_comment_at": "2024-01-24T14:34:02Z",
          "last_comment_author": "ralyodio"
        },
        {
          "number": 117,
          "created_at": "2024-04-23T14:01:44Z",
          "last_comment_at": "2024-04-24T16:59:36Z",
          "last_comment_author": "ralyodio"
        },
        {
          "number": 219,
          "created_at": "2025-06-18T00:20:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 226,
          "created_at": "2025-07-26T06:08:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 227,
          "created_at": "2025-07-26T06:09:26Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 228,
          "created_at": "2025-07-26T06:09:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 229,
          "created_at": "2025-07-26T06:10:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 230,
          "created_at": "2025-07-26T06:10:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 231,
          "created_at": "2025-07-26T06:10:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 232,
          "created_at": "2025-07-26T06:10:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 233,
          "created_at": "2025-07-26T06:17:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/shurco/mycart",
    "host": "github.com",
    "name": "mycart",
    "owner": "shurco"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 71,
      "inputs": {
        "security": 66,
        "vitality": 83,
        "community": 74,
        "governance": 61,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 83,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "commits_last_year": 126,
              "human_commit_share": 0.91,
              "days_since_last_push": 0,
              "active_weeks_last_year": 22
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "22/52 weeks with commits",
                "points": 15.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "126 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 126
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 24,
              "latest_release_tag": "v0.2.9",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 22.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "24 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~22.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 22.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 74,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "forks": 49,
              "stars": 357,
              "watchers": 4,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "357 stars",
                "points": 41.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 357
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "49 forks",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 49
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "4 watchers",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 61,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 9,
              "top_contributor_share": 0.847
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 85% of commits",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 85
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "9 contributors",
                "points": 12.2,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "merged_prs": 134,
              "open_issues": 16,
              "closed_issues": 47,
              "issue_closed_ratio": 0.746,
              "closed_unmerged_prs": 135
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "75% of issues closed",
                "points": 34.9,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 75
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "134/269 decided PRs merged",
                "points": 19.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 134,
                      "decided": 269
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 54,
            "inputs": {
              "followers": 47,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "shurco",
              "public_repos": 16,
              "account_age_days": 5782
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "47 followers of shurco",
                "points": 12.1,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 47,
                      "login": "shurco"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "16 public repos, account ~15 yr old",
                "points": 21,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 16
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/shurco/mycart"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "24 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "basket",
                "cart",
                "ecommerce",
                "ecommerce-platform",
                "golang",
                "stripe",
                "stripe-payments",
                "shopping-cart",
                "payment",
                "shop",
                "go",
                "commerce",
                "e-commerce",
                "hacktoberfest",
                "cryptocurrency-exchanges",
                "paypal",
                "self-hosted",
                "svelte"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "18 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 6.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 52 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 52
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 22
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 87,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 3,
              "assessed_packages": 52,
              "unassessed_packages": 22,
              "affected_by_severity": "low 1, unknown 2",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: github.com/disintegration/imaging v1.6.2 (low), golang.org/x/crypto v0.53.0 (unknown)",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "github.com/disintegration/imaging v1.6.2 (low), golang.org/x/crypto v0.53.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 1051 days ago",
                "points": 39,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 1051
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 52,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 9
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 76,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.967,
              "agent_instruction_files": [
                "AGENTS.md",
                "internal/AGENTS.md",
                "migrations/AGENTS.md",
                "pkg/AGENTS.md",
                "web/AGENTS.md"
              ],
              "agent_instruction_max_bytes": 4960
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, internal/AGENTS.md, migrations/AGENTS.md, pkg/AGENTS.md, web/AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, internal/AGENTS.md, migrations/AGENTS.md, pkg/AGENTS.md, web/AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 91 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 91
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "bun.lockb",
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "web/admin/tsconfig.json",
                "web/site/tsconfig.json"
              ],
              "agent_commit_share": 0.39,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.09
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "web/admin/tsconfig.json, web/site/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "web/admin/tsconfig.json, web/site/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "39 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 39,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "9 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 9,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 22248,
              "source_files_sampled": 217,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/217 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 217,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "sample"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "sample",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "sample"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T19:52:25.742602Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/shurco/mycart.svg",
  "full_name": "shurco/mycart",
  "license_state": "standard",
  "license_spdx": "MIT"
}