Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-24 20:49 UTC

tensor-systems / droste

Recursive analysis engine for data too large for a context window, built with Recursive Language Models (RLMs).

PythonApache-2.0★ 1 Stern⑂ 0 Forksseit Juli 2026Auf GitHub ansehen ↗

tensor-systems/droste erreicht einen Gesundheitsindex von 54 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Vitality (71/100) ab, am schwächsten bei Community & Adoption (33/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

54
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

54
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

tensor-systemsOrganisation
0 Follower4 öffentliche Reposseit Feb. 2026

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlichtTags
PyPIdroste0.20.0-28vor 0 Tagenclidata-analysislong-contextrecursive-analysisrecursive-language-modelrlm

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

71Gut · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
4.8/36Commit-Rhythmus — 7/52 Wochen mit Commits
18/18Commit-Volumen — 242 Commits im letzten Jahr
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Verwendete Eingangsdaten
commits_last_year242
human_commit_share1
days_since_last_push0
active_weeks_last_year7
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 28 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 0 Tagen
27/27Release-Rhythmus — ein Release etwa alle 1 Tage
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Verwendete Eingangsdaten
releases_count28
latest_release_tagv0.20.0
releases_from_tagsnein
days_since_latest_release0
mean_days_between_releases1

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

33Gefährdet · 18 % des Gesamtindex
Wie die Bewertung erfolgt
0/60Stars — 1 Stars
0/25Forks — 0 Forks
0/15Watcher — 0 Watcher
Verwendete Eingangsdaten
forks0
stars1
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
18/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

53Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
0/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits
1.4/13.5Breite der Beitragenden — 1 Beitragende
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Verwendete Eingangsdaten
bus_factor1
contributors_sampled1
top_contributor_share1
Wie die Bewertung erfolgt
40.6/46.8Issue-Lösungsquote — 87 % der Issues geschlossen
37.9/38.3PR-Annahme — 104/105 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 0/25 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs104
open_issues12
closed_issues79
issue_closed_ratio0,868
closed_unmerged_prs1
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
0/25Reichweite des Inhabers — 0 Follower von tensor-systems
6/25Kontohistorie — 4 öffentliche Repos, Kontoalter ca. 0 Jahre
Verwendete Eingangsdaten
followers0
owner_typeOrganization
is_verified
owner_logintensor-systems
public_repos4
account_age_days171

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf pypi
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 0 Tagen
20/20Versionshistorie — 28 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesdroste
ecosystemspypi
any_deprecatednein
min_days_since_publish0

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

67Mittel · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 2 Workflow(s)
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
0/10Topics
0/10Wiki
Verwendete Eingangsdaten
topics
has_wikinein
homepage
has_readmeja
has_docs_dirja
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

37Gefährdet · 16 % des Gesamtindex

Sicherheitslage

37Gefährdet
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — keine Daten
2.5/2.5CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/25 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — keine Daten
4.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate3,7
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, packaging. Die verbleibenden Gewichte wurden renormalisiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

58Mittel · 0 % des Gesamtindex
Wie die Bewertung erfolgt
45/45Agentenanweisungen — AGENTS.md, CLAUDE.md
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 81 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,81
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes49.235
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
0/11Statische Typprüfung
10/10Reproduzierbare Umgebung — lockfile
4/10Belegte Agentenpraxis — 2 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
9/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilespackage-lock.json, uv.lock
has_dockerfilenein
typed_languagenein
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configs
agent_commit_share0,02
toolchain_manifests
dependency_bot_commit_share0
Wie die Bewertung erfolgt
0/45Typprüfbarer Code — Python ohne Typprüfungs-Konfiguration
54.4/55Handhabbare Dateigrößen — 2/176 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languagePython
largest_source_bytes84.604
source_files_sampled176
oversized_source_files2
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — examples
Verwendete Eingangsdaten
example_dirsexamples
has_mcp_signalnein
api_schema_files

Eckdaten

1GitHub-Sterne
1Mitwirkende
242Commits, letzte 12 Monate
0Tage seit letztem Push
28Releases
1Bus-Faktor
12offene Issues
PyPIPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
  • deps.dev does not index pypi:droste@0.20.0; advisories assessed against the repository dependency graph instead

Weitere Details

OpenSSF Scorecard 3.7 / 10
3.7Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-24 20:49 UTC

10Binary-Artifactsno binaries found in the repo
k. A.Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/25 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
k. A.Packagingpackaging workflow not detected
9Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 9
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
Alle Abhängigkeiten nicht erhoben

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 10735,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Python": 2068479,
        "TypeScript": 167707
      },
      "pushed_at": "2026-07-24T19:19:57Z",
      "created_at": "2026-07-10T17:14:16Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T19:19:50Z",
      "description": "Recursive analysis engine for data too large for a context window, built with Recursive Language Models (RLMs).",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "Organization",
      "login": "tensor-systems",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/258928210?v=4",
      "created_at": "2026-02-02T21:08:40Z",
      "is_verified": null,
      "public_repos": 4,
      "account_age_days": 171
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2026-07-24T19:24:00Z"
        },
        {
          "tag": "v0.19.2",
          "kind": "patch",
          "published_at": "2026-07-20T17:31:58Z"
        },
        {
          "tag": "v0.19.1",
          "kind": "patch",
          "published_at": "2026-07-20T08:15:23Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-07-20T06:48:02Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-07-19T10:12:10Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-07-19T04:19:54Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-07-19T01:01:33Z"
        },
        {
          "tag": "benchmark-data/oolong-pairs-32k-2026-07-17",
          "kind": "other",
          "published_at": "2026-07-18T03:54:12Z"
        },
        {
          "tag": "v0.15.5",
          "kind": "patch",
          "published_at": "2026-07-16T17:21:57Z"
        },
        {
          "tag": "v0.15.4",
          "kind": "patch",
          "published_at": "2026-07-16T02:18:33Z"
        },
        {
          "tag": "v0.15.3",
          "kind": "patch",
          "published_at": "2026-07-15T23:21:07Z"
        },
        {
          "tag": "v0.15.2",
          "kind": "patch",
          "published_at": "2026-07-15T22:59:14Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2026-07-15T22:21:50Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-07-15T19:55:23Z"
        },
        {
          "tag": "v0.14.1",
          "kind": "patch",
          "published_at": "2026-07-15T19:15:29Z"
        },
        {
          "tag": "v0.13.1",
          "kind": "patch",
          "published_at": "2026-07-15T00:22:51Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-07-14T22:33:30Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2026-07-14T21:59:20Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-07-14T21:06:28Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-07-14T19:55:40Z"
        },
        {
          "tag": "v0.10.6",
          "kind": "patch",
          "published_at": "2026-07-13T16:14:37Z"
        },
        {
          "tag": "v0.10.5",
          "kind": "patch",
          "published_at": "2026-07-12T22:46:09Z"
        },
        {
          "tag": "v0.10.4",
          "kind": "patch",
          "published_at": "2026-07-12T22:29:23Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2026-07-12T21:15:22Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2026-07-12T20:23:44Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-07-12T19:44:07Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-07-11T00:40:38Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-07-10T20:33:25Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "bf4aebfdb8da59bf50579902500c47849d566c01",
          "body": "Fixes #195",
          "is_bot": false,
          "headline": "feat: emit live boundary usage events (#196)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-24T19:19:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afa62bbfc96adcd9bac826b84ed995543b17e5b7",
          "body": null,
          "is_bot": false,
          "headline": "Settle complete core token usage (#194)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-20T17:28:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdc8479d036e7a4225a4b1cfa7eb332677cd4874",
          "body": null,
          "is_bot": false,
          "headline": "release: prepare 0.19.1 (#193)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-20T08:12:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86c33a7f8a76b23b1da76447fc0b400dfac22225",
          "body": null,
          "is_bot": false,
          "headline": "Require ModelRelay usage provenance (#192)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-20T07:50:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16c6419367b3329977ed5718d146f21476860928",
          "body": "Supports tensor-systems/modelrelay#1807.",
          "is_bot": false,
          "headline": "Preserve explicit usage observation fidelity (#189)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-20T06:44:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b30e3a8f8e7303b9c38d85ec89955b70dfcf69d",
          "body": "Fixes #187",
          "is_bot": false,
          "headline": "fix: preserve exact callback failure usage (#188)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-19T10:09:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c2446ca38dbeaae402d602c2c9c7b774aaa0b65",
          "body": "* Window live root transcripts (closes #179)\n\n* Update prompt-pack distribution checks\n\n* Address transcript windowing review feedback",
          "is_bot": false,
          "headline": "Window historical state in live root transcripts (#185)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-19T04:26:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a85c4e91da2561b2b02b9b99cc7b0f9606d83280",
          "body": null,
          "is_bot": false,
          "headline": "feat(trace): preserve cache token usage aggregates (#186)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-19T04:17:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09d1d807f8a85acc943dab2ccaa098eb1bd4428d",
          "body": "* Settle inference budgets from exact token usage\n\nCloses #181\n\n* Preserve structured errors in fail-fast batches\n\n* Preserve partial provider usage counters\n\n* Require terminal Anthropic stream usage\n\n* Preserve native batch errors on structural failure",
          "is_bot": false,
          "headline": "Settle inference budgets from exact token usage (#183)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-19T00:59:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c31057cded9379daac1326285fb285a51783d268",
          "body": "* Implement Anthropic prompt caching (closes #178)\n\n* Address prompt caching review findings",
          "is_bot": false,
          "headline": "Add Anthropic prompt caching to the root loop (#182)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T23:25:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba1ad141a079a78cb3f39ff94b56bd8397dd9e63",
          "body": "The main README should stay short and scannable; per-family caveats\n(BrowseComp-Plus's judge/generation cost split, LongBench-v2 CodeQA's\ncost-bounded sample, OOLONG-Pairs' 504 measurement limit, etc.) were\nalready fully covered in benchmarks/README.md, so the footnotes here\nwere pure duplication. Table numbers are unchanged.",
          "is_bot": false,
          "headline": "docs: move benchmark table footnotes to the benchmark guide (#177)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T18:51:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4561f235e03616bae34a5a253b5fd8c2f434ee19",
          "body": "Percentage comparisons against the RLM paper's own reported numbers\naren't meaningful since the paper used older GPT-5 models, not the\nmodels droste uses. The comparison that matters is droste vs. direct\nmodel usage (same models, apples-to-apples), which stays unchanged.",
          "is_bot": false,
          "headline": "docs: remove paper score comparisons (#176)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T18:43:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8edb434f8595cba8e2fcd8ed1ab7d3166c5ea533",
          "body": "…ts (#175)\n\n* benchmarks: materialize BrowseComp-Plus 1K arm\n\nSource Tevatron/browsecomp-plus@144cff8e35b5eaef7e526346aa60774a9deb941f and Tevatron/browsecomp-plus-corpus@b27b02bc3e45511b8b82a13e6f90ce761df726f6 with sampling seed 166001.\n\nFollow texttron/BrowseComp-Plus@046949032b0328319cc9a02663a7\n[…]\nmarks: publish live BrowseComp-Plus artifacts\n\n* docs: publish BrowseComp-Plus benchmark results\n\n* benchmarks: judge BrowseComp-Plus semantically\n\n* benchmarks: harden BrowseComp-Plus judge reporting",
          "is_bot": false,
          "headline": "benchmarks: publish live BrowseComp-Plus results as immutable artifac…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T18:27:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c47276ae8ce360bf86432f7bf9c27d25c00225ed",
          "body": "…(#169)\n\n* Add pinned OOLONG-Pairs benchmark\n\nTranscribe the 20 queries verbatim from arXiv:2512.24601v3 Appendix D.1 and materialize answer keys from the pinned OOLONG trec_coarse context window at row 1050.\n\nSemantic decisions: X or Y is inclusive OR; date constraints use vacuous truth for users w\n[…]\nnchmarks: store OOLONG-Pairs predictions in release asset\n\n* fix(benchmarks): rebase OOLONG-Pairs publication\n\n* fix(benchmarks): harden lean artifact verification\n\n* docs: summarize benchmark results",
          "is_bot": false,
          "headline": "benchmarks: publish live OOLONG-Pairs results as immutable artifacts …",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T06:04:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38bb7df2595a04f9c284cd14cede0dd7217e9aef",
          "body": "…ifacts (#171)\n\n* benchmarks: pin zai-org LongBench-v2 CodeQA at 2b48e494\n\nUse the renamed zai-org dataset path and verify the pinned filtered rows before materialization.\n\n* benchmarks: pin LongBench-v2 CodeQA to a disclosed 20-of-50 cost-bounded subsample\n\nFull-domain runs blew past cost expectati\n[…]\nests\n\n* docs: contextualize LongBench CodeQA result\n\n* benchmarks: bump live suite for LongBench CodeQA\n\n* Rename LongBench CodeQA snapshot manifest\n\n* fix(benchmarks): document CodeQA materialization",
          "is_bot": false,
          "headline": "benchmarks: publish live LongBench-v2 CodeQA results as immutable art…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T05:15:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6bd185a0ceb0c53a8c840412e58e4706e6aa092a",
          "body": "* benchmarks: materialize RULER S-NIAH arm\n\nImplement the Hsieh et al. (2024) noise S-NIAH methodology, verified against NVIDIA/RULER commit 38da79d79519ef87aa46ae804f838e1eab7f86d7.\n\n* Clarify exact S-NIAH answer format\n\n* Add S-NIAH benchmark results\n\n* docs: publish S-NIAH benchmark results\n\n* benchmarks: preserve publication manifest snapshots\n\n* fix(benchmarks): report missing materialized tasks cleanly",
          "is_bot": false,
          "headline": "benchmarks: publish live S-NIAH results as immutable artifacts (#170)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T04:47:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5cf1c053a01db611a0394b63a8f52d8ee270f96e",
          "body": "…#168)\n\n* benchmarks: pin Terra arms for issue 81 pilot\n\nUse gpt-5.6-terra for root and subcalls in the Droste arm and as the sole model in the direct arm, isolating the RLM technique from model choice. Set medium root reasoning symmetrically, raise root output headroom to 16384 tokens, and enable l\n[…]\nim (the cost figure is an\nexact measurement, not a sampled statistic, and needs no such caveat).\n\n* tests: align benchmark coverage with published run\n\n* tests: apply ruff format to test_benchmarks.py",
          "is_bot": false,
          "headline": "benchmarks: publish live OOLONG 131K results as immutable artifacts (…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-18T01:33:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "605caa9b8b985ce5fbea09c82d622102dcd86ebc",
          "body": "Adds three new GitHub-hosted ubuntu-latest jobs (test-linux, build-linux,\ndeno-linux) that mirror the existing self-hosted macOS ARM64 jobs step for\nstep, giving the project its first Linux signal since the macOS runner\ncutover. Existing jobs are untouched: same names, runners, and steps, so\nthe bra\n[…]\nlane remains\nthe sole authoritative required lane until the Linux lane demonstrates\nstability, per the policy comment added above the new jobs.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add independent Linux CI lane on ubuntu-latest (#146) (#165)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-17T14:54:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "df2dc386375da01965d1b1de4bac18fad98db02e",
          "body": "* docs: restructure README around hook → mechanism → use cases\n\nLead with the demo instead of the 'not an agent' disclaimer, merge that\ncontrast into 'How it works', add a 'When to reach for it' section with\nmechanism-grounded use cases, move the Trace ABI paragraph and runner\nprotocol details into \n[…]\n\ntransits' overstated the isolation; restore 'does not have to pass\nthrough'.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: restructure README around hook → mechanism → use cases (#164)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-17T03:15:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3ec96074d9c59e6104ddd4bd25d0c5e304e080d1",
          "body": null,
          "is_bot": false,
          "headline": "release: prepare 0.15.5 (#163)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T17:19:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "929a266991b6b3f898d5af9edccf2097b72e4e99",
          "body": null,
          "is_bot": false,
          "headline": "test(trace): add canonical execution fixture (#162)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T17:12:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "985df6a1df3cfcf259daa0d6abf01987f5127747",
          "body": "release: prepare 0.15.4",
          "is_bot": false,
          "headline": "Merge pull request #159 from tensor-systems/release/0.15.4",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T02:15:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16ca3e1d788f26708881d6c8c301f8e54de312d8",
          "body": null,
          "is_bot": false,
          "headline": "release: prepare 0.15.4",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T02:10:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f24bf320bfeebc04b93b07725a5ed33e7f0d5ba",
          "body": "…rmance\n\ntest: add lifecycle conformance scenarios",
          "is_bot": false,
          "headline": "Merge pull request #158 from tensor-systems/codex/145-lifecycle-confo…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T02:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97bfe607d2a666c0cdf25a856b35038b2431dec1",
          "body": null,
          "is_bot": false,
          "headline": "test: harden lifecycle scenario cleanup",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T01:58:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "085fb82dee9b00e0be6e8513a8286d33ff7be55e",
          "body": "Fixes #145",
          "is_bot": false,
          "headline": "test: add lifecycle conformance scenarios",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-16T01:37:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "736cd4a5618e7aab552b3246a491e0b3723ad3ab",
          "body": "…sport\n\nRegister relay fd3 for external Deno launchers",
          "is_bot": false,
          "headline": "Merge pull request #157 from tensor-systems/codex/153-deno-event-tran…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T23:18:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc9cb90e54dfb6a3ebaa63cc18fb114a85639a11",
          "body": null,
          "is_bot": false,
          "headline": "test: name relay launcher boundaries explicitly",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T23:11:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ac932638df8902fe63d822d4f65130052f0dce0",
          "body": null,
          "is_bot": false,
          "headline": "fix: register externally inherited relay event fd",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T23:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bcdc9454318887b656dfcde192269464f945dca",
          "body": "Give relay events a dedicated host descriptor",
          "is_bot": false,
          "headline": "Merge pull request #156 from tensor-systems/codex/153-dedicated-event-fd",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:56:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1dba2bca82d103db8518a545ae1eb837e0d8f8c4",
          "body": null,
          "is_bot": false,
          "headline": "docs: align relay response boundaries",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:52:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2432315a85814fd8c0d32006001102c9a019dee",
          "body": null,
          "is_bot": false,
          "headline": "docs: make relay migration duties explicit",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:50:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c721c7941c98dfecae6c07f9b403a61bc70d8f1",
          "body": null,
          "is_bot": false,
          "headline": "test: reuse canonical corpus in transport probe",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:45:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42e508599fead91475c97c034fbffb05bc3d37c8",
          "body": null,
          "is_bot": false,
          "headline": "fix: settle event write failures cleanly",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:39:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d99fe7e63aa099e0367282ea69f4af82564c2cc1",
          "body": null,
          "is_bot": false,
          "headline": "fix: distinguish event input from transport failure",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:32:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94a62bbcfec4bedc3cf754967b29cdb0878a2cfa",
          "body": null,
          "is_bot": false,
          "headline": "refactor: make relay startup metadata immutable",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:27:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbead2a89f080418c1ca00fc5c3873b25ce51d59",
          "body": null,
          "is_bot": false,
          "headline": "test: bind relay lanes to released fixtures",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:26:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9baaaa7083b665c97d0b24c0c12c04a23293ab6a",
          "body": null,
          "is_bot": false,
          "headline": "test: exercise relay event lane faults",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e0fabae03ee37ac05fe6013819fce18bd070c6dc",
          "body": null,
          "is_bot": false,
          "headline": "fix: preserve empty preflight event lane",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "798091ef45c9056bf2d15fe664277b534d914d8c",
          "body": null,
          "is_bot": false,
          "headline": "fix: close event transport review findings",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c7a5dec708e4537b0563c1d9d268cfe25d319e4",
          "body": null,
          "is_bot": false,
          "headline": "fix: harden relay event channel failure",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58f16614a8513c9eda42e1139fe9f0a4fb5d2ca1",
          "body": null,
          "is_bot": false,
          "headline": "feat: dedicate relay event descriptor",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cae79242cd59d80a354fb37520f1a9c68522120",
          "body": "Release Trace ABI v2 cross-runtime conformance corpus",
          "is_bot": false,
          "headline": "Merge pull request #155 from tensor-systems/release/144-event-abi-0.15.1",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:20:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7953b695f0e54c68824af701229a772e06733836",
          "body": null,
          "is_bot": false,
          "headline": "feat(trace): ship cross-runtime conformance corpus (#144)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T22:17:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "675c8514da95cba87a995aa951211dd84ea8e5f6",
          "body": "Release 0.15.0",
          "is_bot": false,
          "headline": "Merge pull request #152 from tensor-systems/release/0.15.0",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:53:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f37de7aa6f3eb07c25292aa875056fc85618f3d",
          "body": null,
          "is_bot": false,
          "headline": "docs: finalize 0.15.0 release notes",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:50:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4f874642f8bc6d2b0d20b19cd78ad4ddc96593e",
          "body": null,
          "is_bot": false,
          "headline": "release: prepare 0.15.0",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:47:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9e6cfaa5b977ba2bc6d03c0204aadf06f14a121",
          "body": "* Add Trace ABI v2 lifecycle events\n\n* Complete Trace ABI v2 conformance\n\n* Address lifecycle review findings\n\n* Pin lifecycle integer type parity",
          "is_bot": false,
          "headline": "Add typed subcall and recovery lifecycle events (#151)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:44:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71b23e35da3a9f96510cbefb416f8dfe06f33e11",
          "body": "Add secure MCP Streamable HTTP transport",
          "is_bot": false,
          "headline": "Merge pull request #150 from tensor-systems/codex/92-mcp-http",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:40:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83b5c629dcaa62b0d23744492e5c55f0c10a2970",
          "body": null,
          "is_bot": false,
          "headline": "fix: preserve Pyodide source imports",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:37:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c32fe98c2e34583f8ff3600a70bbc7afbb8dd2c5",
          "body": null,
          "is_bot": false,
          "headline": "fix: harden MCP HTTP lifecycle boundaries",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93e6bb94bcff102bef738cdc291e4cebd543653f",
          "body": null,
          "is_bot": false,
          "headline": "feat: add secure MCP Streamable HTTP transport",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e129f5cc2702afeeb287cca132cf021fcd03797c",
          "body": "* Release 0.14.0\n\n* Release 0.14.1",
          "is_bot": false,
          "headline": "Release v0.14.1 (#149)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T19:13:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f618e8206c327e751aa21d1f4408c52e17a9a17",
          "body": "Run tagged releases on self-hosted macOS ARM64",
          "is_bot": false,
          "headline": "Merge pull request #148 from tensor-systems/fix/147-release-self-hosted",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:54:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab0669cb949467a5b938b6f7826cbdc2f9b80e11",
          "body": null,
          "is_bot": false,
          "headline": "Fix tagged release runner safety (closes #147)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:52:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e98e1270e8d0594958921f18b3d9a7cef46b61e",
          "body": null,
          "is_bot": false,
          "headline": "Release 0.14.0 (#143)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:39:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bd113b17402939737d062b6528420fe0dd21175",
          "body": null,
          "is_bot": false,
          "headline": "Add truthful subcall input capacity metadata (#141)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:32:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06969400a414d3ce9c3e3b32f129df14f5bc04b3",
          "body": "Add local MCP stdio provider spike",
          "is_bot": false,
          "headline": "Merge pull request #140 from tensor-systems/feat/5-mcp-provider",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:21:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06ed94cdecd5505d85339a8a2bdd2a6d54ca8ed7",
          "body": null,
          "is_bot": false,
          "headline": "Fail MCP session when server response stalls",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:18:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67b43d06f3161f58236507b522ec8c3b8cdcaefb",
          "body": null,
          "is_bot": false,
          "headline": "Stabilize batch concurrency regression test",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:13:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b6def8fee511646189c8d88fec6a7db67e280fe",
          "body": null,
          "is_bot": false,
          "headline": "Fix MCP server response lock race",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:13:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbc7b7ae7d15158b23a59d3fa2d16bacffc0a854",
          "body": "Closes #5",
          "is_bot": false,
          "headline": "Add local MCP stdio provider spike",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T18:00:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ae7cd0bc1d2d8e61377f65c386d19e8d9ef5aa1",
          "body": "…-lifecycle\n\nAdd explicit provider runtime lifecycle",
          "is_bot": false,
          "headline": "Merge pull request #137 from tensor-systems/feat/130-provider-runtime…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T16:04:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a4acf42b78280bc819c1100be8532acbe385ad0",
          "body": null,
          "is_bot": false,
          "headline": "Add explicit provider runtime lifecycle",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T16:00:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bace5cfe564f73e9b6ba4fbc9ecb560dbd039400",
          "body": "Update CI actions to Node 24 runtimes",
          "is_bot": false,
          "headline": "Merge pull request #135 from tensor-systems/codex/134-actions-node24",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T04:21:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85c20d851136f51cba16a64b328516f6401e8a84",
          "body": null,
          "is_bot": false,
          "headline": "Update actions to Node 24 runtimes",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T04:18:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35e4fedaedd6a7192eb1ce7c9cb0daeb4ba3e7e8",
          "body": "…provider\n\nAdd first-party local filesystem text provider",
          "is_bot": false,
          "headline": "Merge pull request #131 from tensor-systems/feat/75-local-filesystem-…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T03:56:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38fdf7860ccc080e5f804212377ff3849ab3f2a6",
          "body": null,
          "is_bot": false,
          "headline": "feat: add local filesystem text provider",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T03:52:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90d32268bbc8147ae49808783e15be34ce7f8478",
          "body": "…nners\n\nRun CI on self-hosted macOS ARM64 runners",
          "is_bot": false,
          "headline": "Merge pull request #133 from tensor-systems/ci/132-tailscale-macos-ru…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T03:06:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "479b8e29666070db86ba94b610348c89d33d67c1",
          "body": null,
          "is_bot": false,
          "headline": "Run CI on self-hosted macOS ARM64",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T03:03:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90e9258c047bf8368ba0e2917f645afd5b0aaa9a",
          "body": "….13.1\n\nRelease Droste 0.13.1 maintenance patch",
          "is_bot": false,
          "headline": "Merge pull request #129 from tensor-systems/codex/integrate-release-0…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:21:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9bd34aebe0796195276a7588bf71bbbeb353026",
          "body": "…se-0.13.1",
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/main' into codex/integrate-relea…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:19:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a85bbcb9d90080736dd5cc8fbc0a13d4030b525",
          "body": "…ct-mount\n\nRemove legacy direct database mount",
          "is_bot": false,
          "headline": "Merge pull request #128 from tensor-systems/fix/45-delete-legacy-dire…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed4d10153f36dc19fdf0583e4d324e0de3486d68",
          "body": null,
          "is_bot": false,
          "headline": "Keep post-patch bridge notes unreleased",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:17:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a14b5b06643b9e0c051363507af2554f1076a6a",
          "body": null,
          "is_bot": false,
          "headline": "Merge Droste 0.13.1 maintenance release",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:15:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e7c31165e57e6adf20b3981cec2f0d3e1b45167",
          "body": "Fixes #127",
          "is_bot": false,
          "headline": "Prepare Droste 0.13.1 release",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:15:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2964be0ebcccd4c07e9c9d4164f454ed3d422e5",
          "body": null,
          "is_bot": false,
          "headline": "Remove legacy direct database mount",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:14:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0aad1eddc913cf65d92c88d5ac33a68287eb2fb",
          "body": "…ception\n\nFix runner exception attribution and root effort parity",
          "is_bot": false,
          "headline": "Merge pull request #126 from tensor-systems/codex/integrate-runner-ex…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:12:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7876b803f825493cb4b25794ae9b70c4b96d0c5b",
          "body": null,
          "is_bot": false,
          "headline": "Merge relay fixture compatibility follow-up",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:10:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "889884280b005810dc4169132a602d02fdf9a1d5",
          "body": "# Conflicts:\n#\tsrc/droste/substrates/_relay/relay.ts",
          "is_bot": false,
          "headline": "Merge runner exception maintenance fix",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:10:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bdc7615c2cb787e85dc242fde93ed52194c8c10b",
          "body": null,
          "is_bot": false,
          "headline": "Keep relay failure fixture adapter-compatible",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:10:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9740b7cddb87d7f0a99eabaf33fb4b74f8f1dbff",
          "body": "Fixes #123",
          "is_bot": false,
          "headline": "Fix runner operation and root effort parity",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:07:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fd8e66900d7b0aae88df3507bc9bca2080e9899",
          "body": "Fix duplicate capability call admission race",
          "is_bot": false,
          "headline": "Merge pull request #124 from tensor-systems/codex/114-call-identity",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-15T00:00:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cf9826d39c2f94e70895fd90053aac87bcc87ec",
          "body": "Fixes #114",
          "is_bot": false,
          "headline": "fix: claim capability call identity before admission",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T23:58:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "541bf63bb37de21bf7c8e45b83b363050d1cc452",
          "body": "…bridge\n\nfeat: add duplex provider bridge control",
          "is_bot": false,
          "headline": "Merge pull request #122 from tensor-systems/feat/102-duplex-provider-…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T22:38:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff83f0c80e3056440f66d3f9b494fc22b8a88566",
          "body": null,
          "is_bot": false,
          "headline": "feat: add duplex provider bridge control",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T22:35:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25bcbd15ffb279f0d1d58f9879b7bc4e908647e9",
          "body": "Prepare Droste 0.13.0 release",
          "is_bot": false,
          "headline": "Merge pull request #121 from tensor-systems/codex/release-0.13.0",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T22:31:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15420a708d4214bd17d593956a651df678e32ebb",
          "body": "Fixes #120",
          "is_bot": false,
          "headline": "Prepare Droste 0.13.0 release",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T22:29:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd3b0f0e997e7aff34ea0af6a965e6bbaf81db98",
          "body": "Add content-free scaffold preflight",
          "is_bot": false,
          "headline": "Merge pull request #117 from tensor-systems/codex/runner-preflight",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T22:03:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "017d0a0eb8a7ee5fc13401279d83c72d9e4a3eea",
          "body": null,
          "is_bot": false,
          "headline": "feat: add content-free scaffold preflight",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T22:01:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66660b88025c828196e7d0685bdf4b34f5f691d0",
          "body": "Fixes #118",
          "is_bot": false,
          "headline": "Prepare Droste 0.12.1 release (#119)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T21:57:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9204c9ac386301dd0227c25c339db722ea18345",
          "body": "…ency\n\nMake subcall concurrency immutable and attributable",
          "is_bot": false,
          "headline": "Merge pull request #116 from tensor-systems/codex/113-subcall-concurr…",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T21:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f161077bff0aa5b2a652040d2af16c8b8ab7d6db",
          "body": "Fixes #113",
          "is_bot": false,
          "headline": "Make subcall concurrency immutable and attributable",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T21:33:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b08858783860bfdf982a4bf3df59f6dcd5cb0b36",
          "body": null,
          "is_bot": false,
          "headline": "Prepare Droste 0.12.0 release (#115)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T21:04:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4f62c8bd4c70fd7f6ac9687e3f84b204cf0de00",
          "body": "Implements content-addressed scaffold manifests, the Verifiers v1 harness, trace fidelity fields, and broker-loaded RLM skills.\n\nRefs #3, #63, #64, #101",
          "is_bot": false,
          "headline": "feat: add trainable RLM scaffold contracts (#112)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T20:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d10f2491b0a276776a71e9dbbf7fd52c65082743",
          "body": null,
          "is_bot": false,
          "headline": "Prepare Droste 0.11.0 release (#110)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T19:54:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b50e4a86af2a62b0247067170085ed689610df29",
          "body": null,
          "is_bot": false,
          "headline": "Record canonical prompt pack content hashes (#108)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T19:48:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d76a7220dc19c4df2c859c071d7b988d0af8445",
          "body": null,
          "is_bot": false,
          "headline": "Format benchmark execution limits (#107)",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T19:29:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b2a55481a0861b55f2b838da400bf4c7e1faf9b",
          "body": "Add cooperative capability execution contexts",
          "is_bot": false,
          "headline": "Merge pull request #106 from tensor-systems/feat/89-execution-context",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T19:23:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb3a2733b5e07879ab8dcbab32a40ffcfdb3c367",
          "body": null,
          "is_bot": false,
          "headline": "Harden capability finalization and event ordering",
          "author_name": "Shane Vitarana",
          "author_login": "shanev",
          "committed_at": "2026-07-14T19:20:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 28,
      "commits_last_year": 242,
      "latest_release_at": "2026-07-24T19:24:00Z",
      "latest_release_tag": "v0.20.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "droste",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "cli",
            "data-analysis",
            "long-context",
            "recursive-analysis",
            "recursive-language-model",
            "rlm",
            "Development Status :: 4 - Beta",
            "Environment :: Console",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Operating System :: MacOS",
            "Operating System :: POSIX :: Linux",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.14",
            "Topic :: Scientific/Engineering :: Artificial Intelligence"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/droste/",
          "is_deprecated": false,
          "latest_version": "0.20.0",
          "repository_url": "https://github.com/tensor-systems/droste",
          "versions_count": 28,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2026-07-04T19:42:45.780164Z",
          "latest_published_at": "2026-07-24T19:23:58.549428Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 12
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 84604,
      "source_files_sampled": 176,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 49235
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 104,
        "open_issues": 12,
        "closed_ratio": 0.868,
        "closed_issues": 79,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "shanev",
          "commits": 243,
          "avatar_url": "https://avatars.githubusercontent.com/u/17361?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json",
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/25 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "bf4aebfdb8da59bf50579902500c47849d566c01",
        "ran_at": "2026-07-24T20:49:23Z",
        "aggregate_score": 3.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T19:24:06Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-24T19:19:45Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 2,
          "created_at": "2026-07-10T17:15:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3,
          "created_at": "2026-07-10T17:15:34Z",
          "last_comment_at": "2026-07-14T20:18:23Z",
          "last_comment_author": "shanev"
        },
        {
          "number": 72,
          "created_at": "2026-07-13T22:32:24Z",
          "last_comment_at": "2026-07-13T22:38:55Z",
          "last_comment_author": "shanev"
        },
        {
          "number": 91,
          "created_at": "2026-07-14T06:20:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2026-07-14T18:11:05Z",
          "last_comment_at": "2026-07-14T22:36:44Z",
          "last_comment_author": "shanev"
        },
        {
          "number": 136,
          "created_at": "2026-07-15T04:25:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 138,
          "created_at": "2026-07-15T17:14:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 142,
          "created_at": "2026-07-15T18:34:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 154,
          "created_at": "2026-07-15T21:42:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 167,
          "created_at": "2026-07-17T18:09:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 172,
          "created_at": "2026-07-18T04:39:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 173,
          "created_at": "2026-07-18T05:06:37Z",
          "last_comment_at": "2026-07-18T06:26:14Z",
          "last_comment_author": "shanev"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/tensor-systems/droste",
    "host": "github.com",
    "name": "droste",
    "owner": "tensor-systems"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 37,
        "vitality": 71,
        "community": 33,
        "governance": 53,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 242,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "242 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 242
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 28,
              "latest_release_tag": "v0.20.0",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "28 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 33,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 53,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "merged_prs": 104,
              "open_issues": 12,
              "closed_issues": 79,
              "issue_closed_ratio": 0.868,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "87% of issues closed",
                "points": 40.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 87
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "104/105 decided PRs merged",
                "points": 37.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 104,
                      "decided": 105
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "tensor-systems",
              "public_repos": 4,
              "account_age_days": 171
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of tensor-systems",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "tensor-systems"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "4 public repos, account ~0 yr old",
                "points": 6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 4
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "droste"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "28 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 37,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.81,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 49235
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "81 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 81,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json",
                "uv.lock"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 84604,
              "source_files_sampled": 176,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/176 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 176,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
    "deps.dev does not index pypi:droste@0.20.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T20:49:39.894071Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tensor-systems/droste.svg",
  "full_name": "tensor-systems/droste",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenPyPI.