timothy-billingrails / cadreen-sdks

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Die Installation von npm:@cadreen/mcp@0.1.2 zieht 95 Pakete nach sich, direkt und transitiv: 1 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 465,
      "has_wiki": false,
      "homepage": "https://cadreen.com",
      "languages": {
        "Go": 461368,
        "Ruby": 1306,
        "Shell": 2146,
        "Python": 350965,
        "JavaScript": 19638,
        "TypeScript": 219862
      },
      "pushed_at": "2026-07-22T07:50:09Z",
      "created_at": "2026-06-06T23:36:46Z",
      "owner_type": "User",
      "updated_at": "2026-07-22T07:51:57Z",
      "description": "Official Cadreen SDKs - TypeScript, Go, and Python",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Python",
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "User",
      "login": "timothy-billingrails",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/135520596?v=4",
      "created_at": "2023-06-04T13:00:33Z",
      "is_verified": null,
      "public_repos": 1,
      "account_age_days": 1145
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "cli-v0.4.2",
          "kind": "other",
          "published_at": "2026-07-21T07:39:27Z"
        },
        {
          "tag": "cli-v0.4.0",
          "kind": "other",
          "published_at": "2026-07-14T08:08:12Z"
        },
        {
          "tag": "cli-v0.3.3",
          "kind": "other",
          "published_at": "2026-07-02T02:47:12Z"
        },
        {
          "tag": "cli-v0.3.2",
          "kind": "other",
          "published_at": "2026-07-01T07:50:48Z"
        },
        {
          "tag": "cli-v0.3.1",
          "kind": "other",
          "published_at": "2026-06-29T09:32:44Z"
        },
        {
          "tag": "cli-v0.2.5",
          "kind": "other",
          "published_at": "2026-06-25T05:14:02Z"
        },
        {
          "tag": "cli-v0.2.4",
          "kind": "other",
          "published_at": "2026-06-25T00:47:35Z"
        },
        {
          "tag": "cli-v0.2.3",
          "kind": "other",
          "published_at": "2026-06-23T06:53:48Z"
        },
        {
          "tag": "cli-v0.2.2",
          "kind": "other",
          "published_at": "2026-06-22T06:13:03Z"
        },
        {
          "tag": "cli-v0.2.1",
          "kind": "other",
          "published_at": "2026-06-21T02:13:27Z"
        },
        {
          "tag": "cli-v0.1.0",
          "kind": "other",
          "published_at": "2026-06-20T01:54:22Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "75a31c6dbffd388c876df2275485b7e48f5cf4a8",
          "body": null,
          "is_bot": false,
          "headline": "fix: use camelCase in federation agent fixtures (API returns camelCase)",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-22T07:50:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddc6d7cd34ff2104778a0968773d30646fcfbcfb",
          "body": null,
          "is_bot": false,
          "headline": "fix: update Python SDK test fixtures to match current types",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-22T07:37:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d819eed69a69d21bc8cae8ae64f44a39b200935c",
          "body": "….py update() bug",
          "is_bot": false,
          "headline": "fix: align Python SDK tests with type-aligned API fields + fix agents…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-22T05:50:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "235b1e6892c6cda5ead58a8d2d7e23f99a9615cb",
          "body": "Removed compatibility advisory for version 0.7.0 of the SDK.",
          "is_bot": false,
          "headline": "Update README",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T07:44:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab654fc44025d1ec86f47599d12acf0815f35b6c",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.4.2",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T07:39:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cd017b219106605e90676eedabdd08ed4e56dc5",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove unused imports in devices.ts",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T07:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6469d37179f1766eea51c00d5935e3924d769f42",
          "body": "…d-release-bugs\n\nv0.7.2/0.4.2/0.1.2",
          "is_bot": false,
          "headline": "Merge pull request #4 from timothy-billingrails/fix/sandbox-guards-an…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T07:06:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "085f29fd80528dfe0ae34ef8212052c56caa6eaa",
          "body": "…DME)",
          "is_bot": false,
          "headline": "docs: add Go SDK CHANGELOG.md (was missing, changelog was only in REA…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T06:05:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68b67cbb4c1d3cee7aae36ee865e6504e40070d1",
          "body": "MCP: content type format string→{type:'text',text:string} in2prompt handlers\nWatchdog: initialize stopped=true so first Start() actually launches goroutine\nAnalysis agent: bounds check on schema.CommonPatterns[:3], fallback on ValidateReadOnlySQL failure",
          "is_bot": false,
          "headline": "fix: pre-existing test/build failures",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T01:48:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c77030cf327c1686557bfd7e40ae9fe4e70762b5",
          "body": null,
          "is_bot": false,
          "headline": "fix: TS SDK PATCH retry support",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T00:55:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22d2a05586b5fbe2dee073bbe90033086be56a60",
          "body": "Python SDK:\n- Agent: added health, system_prompt, capabilities, config, metadata, deployed_at\n- AgentCapabilities: added can_execute, can_federate, can_negotiate\n- AgentGovernancePolicy: added description, scope, enabled, updated_at\n- FederationAgent: aligned field names\n- FederationPermissions: add\n[…]\nepted bool → Action string\n- IntelligenceMeta.Version: string → *string omitempty\n- ListFederationsResponse: Federations → Links\n\nCLI:\n- Version default: 0.4.0 → 0.4.2\n- Formula: version 0.4.0 → 0.4.2",
          "is_bot": false,
          "headline": "fix: align SDK types to TypeScript source of truth",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-21T00:30:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f872fd47eba22949255db06ec819a40b28a1e17",
          "body": "SDK v0.7.2 (TypeScript, Python, Go):\n- Device SDK methods for all 3 languages (ListDevices, GetDevice, CreateDevice, DeleteDevice, GetDeviceStatus, DiagnoseDevice, AskDevice, + map/task/collision/sync/blackboard)\n- Fixed: DiagnoseRequest type shadowing → DeviceDiagnoseRequest (TS + Python)\n- Fixed: \n[…]\niagnose, ask, map, tasks, collisions, sync, blackboard)\n- Version bump in main.go hardcoded default\n\nMCP v0.1.2:\n- Removed incorrect 0.7.0/0.7.1 compatibility advisory (MCP has its own version scheme)",
          "is_bot": false,
          "headline": "feat: SDK v0.7.2 / CLI v0.4.2 / MCP v0.1.2",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-20T03:55:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51c642c52280906ec276233ca15d81666c346808",
          "body": "…t docs\n\n- TypeScript/Python/Go: 0.7.0 -> 0.7.1\n- Sandbox mode: postStream/stream throw 404 in sandbox mode\n- Release workflow: fixed Homebrew formula update ordering\n- Documented new server-side execution events:\n  execution_steps_complete (non-terminal), mission_completed_with_gaps\n  (terminal, delivery governance blocked)",
          "is_bot": false,
          "headline": "chore: bump SDK versions to 0.7.1 — sandbox guards, release fix, even…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-16T21:33:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0edaf015c43b5c24f261b9ab295f1490389c096",
          "body": null,
          "is_bot": false,
          "headline": "fix: sandbox stream guards, release workflow, stale formula, doc drift",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-16T21:30:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b58e6141979725db4515da2825a70d34ee11121",
          "body": "fix: stash before checkout in release workflow",
          "is_bot": false,
          "headline": "Merge pull request #2 from timothy-billingrails/the-new-branch",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-14T08:08:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b120434148964a9a1863f084b80fe5badb349e9",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.4.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-14T08:08:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a7b2c5f304d1d3a540c73c33ee2a1c550bd42cc",
          "body": null,
          "is_bot": false,
          "headline": "fix: stash before checkout in release workflow",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-14T08:05:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79d90ab4ed5577b0f36fcdcd7547bc7e6b25ebb8",
          "body": "feat: SDK v0.7.0 + CLI v0.4.0 + MCP server — agents, federation, exte…",
          "is_bot": false,
          "headline": "Merge pull request #1 from timothy-billingrails/the-new-branch",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-14T07:51:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c18aa4adc7933fb9370a83bf1aa4ae830d4f1f00",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into the-new-branch",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-14T07:51:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66f7936d58e62bfe45d8067f3449fe3ba2955b0a",
          "body": "…rnal agents, responses\n\n- Add Agents namespace (full lifecycle, messaging, knowledge, governance, audit, negotiations)\n- Add Federation namespace (cross-workspace, permissions, agent linking)\n- Add External Agents (A2A) namespace\n- Add Responses API (OpenAI-compatible)\n- Add MCP server (@cadreen/mc\n[…]\ned authScheme from ExternalAgentConnection\n- Changed ConnectManualDetail shape\n- Entity responses no longer include workspace_id\n- Fixed CLI federation command target_workspace_id -> targetWorkspaceId",
          "is_bot": false,
          "headline": "feat: SDK v0.7.0 + CLI v0.4.0 + MCP server — agents, federation, exte…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-14T07:46:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dc2d251e2631a22699f5ffdb1af8f252898b70fe",
          "body": "Updated package versions for TypeScript, Python, and Go.",
          "is_bot": false,
          "headline": "Bump package versions to 0.6.3",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-02T15:12:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e68215dfea994dbf5bc94abdc8dc89c187bc71a9",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.3.3",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-02T02:47:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d53f7bbed3cca3e5756c1233659e94c8ea47d0ae",
          "body": "Version bumps:\n- TypeScript SDK: 0.6.2 -> 0.6.3\n- Python SDK: 0.6.2 -> 0.6.3\n- Go SDK: 0.6.2 -> 0.6.3\n- CLI: 0.3.2 -> 0.3.3\n\nChangelogs updated in all 8 required locations (README + CHANGELOG.md for each SDK/CLI).",
          "is_bot": false,
          "headline": "release: v0.6.3 / v0.3.3 — bug fixes and changelog updates",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-02T02:42:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cef28e0345e9f61e3e4776dc27c4f13f0f2e8b1",
          "body": "Python SDK:\n- Fix invoke_stream() crash: replaced nonexistent _client._session with httpx-sse aconnect_sse\n- Fix chat.completions() and completions_stream() silently dropping user_id from request body\n\nGo SDK:\n- Fix retry body reuse bug: bytes.Reader was consumed on first attempt, retries sent empty\n[…]\n  (were claimed in v0.6.2 changelog but not in the code)\n\nCLI:\n- Fix version string: 0.2.5 -> 0.3.2 (matches npm package version)\n- Fix traces output: add newline between confidence and duration lines",
          "is_bot": false,
          "headline": "fix: critical bugs across SDKs and CLI",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-02T02:42:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "712d96173e4abf2b503c96e9c604ed39d882774a",
          "body": "- Python: WebhooksResource.verify_signature(raw_body, signature, secret) using hmac.compare_digest\n- Go: VerifyWebhookSignature(rawBody []byte, signature, secret string) using hmac.Equal\n- Both use HMAC-SHA256, matching the TypeScript implementation\n- Timing-safe comparison in both languages",
          "is_bot": false,
          "headline": "feat: add verifySignature to Python and Go webhook SDKs",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-02T02:42:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f506a9f0f9db401e520353004e80c4c144d641d",
          "body": "- Go SDK Version constant: 0.5.5 -> 0.6.2 (version.go)\n- Add v0.6.2 changelog to TS/Python/Go READMEs\n- Add v0.3.2 changelog to CLI README\n- Fix create-cadreen-app template: remove broken result.status/intelligence.summary references\n- Fix indentation in README changelog entries",
          "is_bot": false,
          "headline": "fix: SDK changelogs, version constant, create-cadreen-app template",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-02T02:42:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e75ec152b7ef30b12d9a8b91b17a96e70aeb0e85",
          "body": null,
          "is_bot": false,
          "headline": "Update SDK versions in README.md",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-01T07:54:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7db5a7f40aa099fb2d3b2d31e0003b8698a0bf9a",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.3.2",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-01T07:52:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c188fae6ea684d37b311dda97f3c2b90709e2142",
          "body": null,
          "is_bot": false,
          "headline": "chore: add 'intelligence' keyword to CLI package.json",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-01T07:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e6b2f761ce7279f028063055b435007e49df550",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump versions to 0.6.2 (SDKs) and 0.3.2 (CLI)",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-01T07:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac481fd46732cacd5add48adcb7dc30fe87ffeaa",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove internal provider names from changelogs",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-01T07:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30fc693cc2c3691c747d85ecb45334b371994fd9",
          "body": "CLI:\n- chat and ask commands now display reasoning from thinking models (gray text)\n- Changelog v0.3.2\n\nSDKs:\n- Changelog v0.6.2 for TS, Python, Go — reasoning, intelligence, conversation_id, blueprints, schedules",
          "is_bot": false,
          "headline": "feat: reasoning display in CLI, changelogs v0.6.2/0.3.2",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-01T07:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "038ec865d7d216841dd1458b822a5bad82fc1b6f",
          "body": "…s/schedules, README updates\n\nSDKs:\n- Go/TS/Python: ChatCompletionResponse with intelligence, conversation_id, reasoning_tokens\n- Go/TS/Python: reasoning field on ChatDelta for streaming reasoning\n- Python: blueprints.py and schedules.py resources (16 new types)\n- IntelligenceMeta shape aligned (cap\n[…]\nhumility — not capability_assessment, epistemic_humility)\n\nREADMEs:\n- All 3: reasoning_delta streaming examples\n- Go: resp.ID -> resp.ConversationID bug fix\n- Changelogs: v0.6.2 entries for all 3 SDKs",
          "is_bot": false,
          "headline": "feat: reasoning support, IntelligenceMeta alignment, Python blueprint…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-07-01T07:30:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "981eaccda0115579b4393fdb14954c963e50724b",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-30T14:14:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64409cf5b49a4b9b4bfb88ba5bc5c91e5e3865c0",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.3.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-29T09:34:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e20a4eac709e8828b1618331cba06d3193311400",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:49:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22f9c0e9e83c37efa269bca5ac62c7602a79ed05",
          "body": "SDKs (TS, Python, Go) 0.6.0 -> 0.6.1:\n- Add user_id optional field to IntentRequest and ChatCompletionRequest\n- Add WorkspaceUsersResource: list, invite, updateRole, remove\n- Add WorkspaceUser, WorkspaceRole, InviteUserRequest, UpdateRoleRequest types\n- Add HttpClient.patch() method\n\nCLI 0.3.0 -> 0.3.1:\n- Add --user-id flag to ask and chat commands\n- Add workspace users command group: list, invite, role, remove\n\nAll changelogs and READMEs updated. No cross-SDK references.",
          "is_bot": false,
          "headline": "feat: user_id field, workspace users, SDK 0.6.1, CLI 0.3.1",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd986ffe2a1a4da2a332362017dc18d2d2bbee24",
          "body": "SDKs (TS, Python, Go) 0.5.5 -> 0.6.0 (BREAKING):\n- ResolveEscalationRequest.resolution -> decision\n- DiagnoseRequest.error -> error_message\n- Retry default aligned to 3\n\nCLI 0.2.5 -> 0.3.0 (BREAKING):\n- setup-session -> setup session (nested under setup)\n- setup flags moved to setup run\n- Fixed 0.2.5 changelog (was setup sessions, not version bump)\n\nAll changelogs and READMEs updated. No cross-SDK references.",
          "is_bot": false,
          "headline": "chore: bump SDKs to 0.6.0, CLI to 0.3.0 — changelogs and version bumps",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1bb3e0788f5b97b283571c362d9c9e7c4a4caab",
          "body": null,
          "is_bot": false,
          "headline": "fix(cli): add examples to proposals and learning help text",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddcd9fa9bd5570376a5500a62eaafa63fa09b845",
          "body": null,
          "is_bot": false,
          "headline": "fix(cli): nest setup-session under setup as 'session' subcommand",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe3fabecd7d583cfd4bda8589e8cd5a65d797d71",
          "body": null,
          "is_bot": false,
          "headline": "fix: align SDK retry defaults to 3 (was 2 in TS/Python)",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f947bb7a31e89bcb409326a98b09301354ce38ec",
          "body": "- escalation resolve: resolution -> decision (TS, Go, Python types + resources)\n- healing diagnose: error -> error_message (TS, Go, Python types + resources + CLI)",
          "is_bot": false,
          "headline": "fix: SDK field name bugs — escalation resolve + healing diagnose",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-29T07:32:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a92fb5e7b63d975ae1e20845be37f85ba9e06d3",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.2.5",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T05:14:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8c4220fd414a65f5f9a56af813c297893498d36",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump npm CLI wrapper to 0.2.5",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-25T05:01:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f395d5e95e5a943e5764399608d3d702bb180d91",
          "body": "Version bumped 0.2.3 → 0.2.5. SHA256 values reset to PLACEHOLDER_*\nso the release-cli workflow can replace them with real checksums\nafter building binaries.",
          "is_bot": false,
          "headline": "fix: reset Homebrew formula SHA256 to placeholders for v0.2.5 release",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-25T05:01:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26fb3586cbc8240ad65bc488f65e5c5ef7e5f0a5",
          "body": "- TypeScript: 0.5.4 → 0.5.5\n- Python: 0.5.4 → 0.5.5\n- Go: 0.5.4 → 0.5.5\n- CLI: 0.2.4 → 0.2.5\n- All CHANGELOGs: added 0.5.5 entry for setup sessions\n- TypeScript README: added cadreen.setupSessions to resource table\n- Go README: added 5 setup session methods to resource table\n- Root README: updated version table to 0.5.5",
          "is_bot": false,
          "headline": "chore: bump versions to 0.5.5/0.2.5, update changelogs and READMEs",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-25T05:00:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5660e7fa44601d911fe4af47ac6882b22b3130e3",
          "body": "TypeScript:\n- SetupSessionsResource (create, list, get, addResources, apply)\n- Types: SetupSession, SetupSessionCreateRequest, SetupSessionAddRequest, SetupSessionApplyRequest, SetupSessionApplyResult\n- Wired as cadreen.setupSessions\n\nPython:\n- SetupSessionsResource (create, list, get, add_resources\n[…]\nn, ApplySetupSession\n- Types: SetupSession, SetupSessionCreateRequest, SetupSessionAddRequest, SetupSessionApplyRequest, SetupSessionApplyResult\n\nCLI:\n- cadreen setup-session create/list/get/add/apply",
          "is_bot": false,
          "headline": "feat(7.4): setup sessions SDK + CLI support",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-25T05:00:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48c523219aaebd22447819481b4f5b90c8a46f62",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.2.4",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T00:47:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8222c911bbdafbcc01c21b4aa53b0d6a1384990",
          "body": "- npm-cadreen/package.json: 0.2.3 -> 0.2.4\n- Root README: version table 0.5.2 -> 0.5.4\n- TypeScript README: add proposals section + resources table + v0.5.4 changelog\n- Python README: add proposals section + v0.5.4 changelog\n- Go README: add proposals section + resources table + v0.5.4 changelog\n- CLI README: add proposals commands + v0.2.4 changelog",
          "is_bot": false,
          "headline": "fix: update all READMEs with proposals docs, fix npm-cadreen version",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-25T00:19:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09af17d2dc08134d7d3e6e6614b2018cd4c18e99",
          "body": "TypeScript SDK (0.5.4):\n- Add ProposalsResource: list, get, accept, dismiss, stats\n- Add types: TaskProposal, ProposalEvidence, ListProposalsResponse, AcceptProposalResponse, DismissProposalResponse, ProposalStatsResponse\n- Register in index.ts, export types\n\nPython SDK (0.5.4):\n- Add ProposalsResou\n[…]\ndd proposals command group: list, get, accept, dismiss, stats\n- Flags: --status, --limit, --reason\n\nAll SDKs: removed tenant_id from public types (internal concept, auth token handles tenant context).",
          "is_bot": false,
          "headline": "feat: add ProposalsResource to all SDKs + CLI (v0.5.4 / v0.2.4)",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-25T00:13:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55fca0521b1df3371c0c33a1c213521e0e4991d6",
          "body": null,
          "is_bot": true,
          "headline": "chore: update Homebrew formula SHA256 for v0.2.3",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-23T06:53:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4459c57bea4ae2aeceb69202cd1061c956d37d4",
          "body": "…lity)\n\nSDKs v0.5.3:\n- Add dry_run field to IntentRequest in all 3 SDKs (TS, Python, Go)\n- Fix Go SDK Version constant (was stuck at 0.5.0 since v0.5.0)\n- Changelog entries for 0.5.3 in all READMEs\n\nCLI v0.2.3:\n- Updated npm description: AI orchestration, governance, memory\n- Updated npm keywords: openai, ai, automation, orchestration, llm, agent, tool-calling, policy\n- Changelog entry for 0.2.3 in README",
          "is_bot": false,
          "headline": "feat: SDKs v0.5.3 (dry_run on IntentRequest), CLI v0.2.3 (discoverabi…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-23T06:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a63296a57db735bce26338327fe103608b489c8",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T14:01:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fae90b19c1f48641f74b3d4807c378e1b489b4a1",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T07:00:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09ec635517b5d6815547bdcd560d6cc806d9b505",
          "body": null,
          "is_bot": false,
          "headline": "fix: add fetch-depth: 0 to release workflow so git checkout master works",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T06:39:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "692b110cd3eb7608204b0de9904528d57ec4c53d",
          "body": null,
          "is_bot": false,
          "headline": "docs: add v0.5.2 and v0.2.2 changelog entries to all READMEs",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T06:32:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b662e62e70b7c6bb4d5cde95726a02094ed9640",
          "body": null,
          "is_bot": false,
          "headline": "fix: add readme field to pyproject.toml, update Python SDK changelog",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T06:26:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc4134068517926d874ea59a43699645129ec859",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump @cadreen/cli to 0.2.2",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T06:18:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "763e48bc934b5f2ce3ecef62f34879f522ebf2fd",
          "body": null,
          "is_bot": false,
          "headline": "chore: update Homebrew formula SHA256 for CLI v0.2.2",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T06:16:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6da8dbf88d63ac652cd4f045ce314f39f9f5d10b",
          "body": "… blueprints.ts",
          "is_bot": false,
          "headline": "fix: unused import in setup.go, remove non-existent patch method from…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T06:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d7e0673ae7237071390041e7a9a143884a3b3bf",
          "body": null,
          "is_bot": false,
          "headline": "chore: reset Homebrew SHA256 to placeholders for v0.2.2 release workflow",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T05:28:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4063323cfad598b621bf51a299682c9b92e6a992",
          "body": "SetupCredentialResult, SetupMemoryResult, SetupPolicyResult status\nnow includes 'would_create' alongside 'created' and 'failed'.",
          "is_bot": false,
          "headline": "fix: add would_create to TypeScript SDK status unions for dry_run",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T05:21:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "091ae544a12ab277acb40e5adeff3ca1652e0294",
          "body": "Go SDK:\n- blueprints.go: ListBlueprints, GetBlueprint, CreateBlueprint, DeleteBlueprint, RunBlueprint, ListBlueprintRuns\n- schedules.go: ListSchedules, GetSchedule, CreateSchedule, PauseSchedule, ResumeSchedule\n\nTypeScript SDK:\n- resources/blueprints.ts: BlueprintsResource with list/get/create/updat\n[…]\nlueprint, delete_blueprint, run_blueprint, list_blueprint_runs\n- Added list_schedules, get_schedule, create_schedule, pause_schedule, resume_schedule\n\nHomebrew formula:\n- Homepage URL: /infra appended",
          "is_bot": false,
          "headline": "feat: SDK resource methods for blueprints + schedules + homepage URL",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T04:51:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e28995706545d45bd438b1a1ddb498e28ad3d51",
          "body": "- TypeScript SDK: 0.5.1 → 0.5.2\n- Python SDK: 0.5.1 → 0.5.2\n- CLI: default version 0.2.2\n- Homebrew formula: 0.2.1 → 0.2.2 (SHA256 hashes need updating after release)",
          "is_bot": false,
          "headline": "chore: version bump — SDKs v0.5.2, CLI v0.2.2",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T04:37:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afcc53ba2622a2b77a6c656462b57987dcb6f5da",
          "body": "New commands:\n- cadreen setup --purpose '...' [--dry-run] [--memory '...'] [--policy '...']\n- cadreen blueprints list|create|run|show|runs|archive\n- cadreen schedules list|create|pause|resume|show\n- cadreen policies create --name '...' --rule '...' [--severity ...]\n\nAll commands support --format json for programmatic use.",
          "is_bot": false,
          "headline": "feat: CLI commands — setup, blueprints, schedules, policies create",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T04:35:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f25ba655d0cabec87d4d60ee1141cb27b199d56",
          "body": "Also added missing Notice field to SetupResult.",
          "is_bot": false,
          "headline": "feat: setup dry_run — add dry_run to SetupRequest and SetupResult",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T03:59:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f183d5bb2cd96406b5a2ba0263ec0020d90b0332",
          "body": "Also added missing notice field to SetupResult.",
          "is_bot": false,
          "headline": "feat: setup dry_run — add dry_run to SetupRequest and SetupResult",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-22T03:59:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ef208fcc9066e139c3761e693b568e9deaa550e",
          "body": null,
          "is_bot": false,
          "headline": "chore: update Homebrew formula SHA256 for CLI v0.2.1",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-21T02:15:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e6597d09faeb607e2c96c3ee463c6ed43bdf2d0",
          "body": "Version bumped to 0.2.1, SHA256s restored to PLACEHOLDER_* values so the\nrelease-cli.yml workflow can replace them automatically on tag push.",
          "is_bot": false,
          "headline": "fix: restore Homebrew formula placeholders for workflow sed replacement",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-21T02:10:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04e6884e0026d55b95b3b915217bc8b60092bdd7",
          "body": "- typescript/package.json: 0.5.0 → 0.5.1\n- python/pyproject.toml: 0.5.0 → 0.5.1\n- npm-cadreen/package.json: 0.2.0 → 0.2.1",
          "is_bot": false,
          "headline": "fix: bump SDK versions to 0.5.1 and CLI to 0.2.1",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-21T01:56:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30eb5d166c5ef2892275f3f89d101ac5383deaaf",
          "body": null,
          "is_bot": false,
          "headline": "fix: update root README version table to 0.5.1",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T23:52:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83802e6c0c405c46a4e6916ad2d02ac3809e380c",
          "body": "Go SDK: UploadDocument(ctx, filePath)\nTS SDK: documents.upload(file, filename?) with postMultipart client method\nPython SDK: documents.upload(file_path) + upload_bytes(content, filename)\nCLI: cadreen documents upload [filepath]\n\nAll READMEs updated with upload examples and changelog entries.",
          "is_bot": false,
          "headline": "feat: document upload support in all SDKs + CLI",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T23:09:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6d8dd55c77c1daecfcdbd35eec6d8d46a087e39",
          "body": "… learning, credentials\n\nNew resources added to all 3 SDKs + CLI:\n- Documents: list, get, download\n- Escalations: list, get, resolve\n- Healing: stats, precedents, diagnose\n- Webhooks: create, list, delete\n- Learning: patterns, episodes, suggestions\n- Credentials: list, create, delete\n\nSDK inconsiste\n[…]\nstPolicies(), GetPolicy()\n- Python SDK: added list_capabilities(), assess()\n- TypeScript SDK: added listCapabilities(), assess()\n\nVersion bumps:\n- Go/TS/Python SDKs: 0.5.0 → 0.5.1\n- CLI: 0.2.0 → 0.2.1",
          "is_bot": false,
          "headline": "feat: close SDK/CLI gaps — documents, escalations, healing, webhooks,…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T22:54:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb5aabd643eb0fb0ffd9a5d205afeecb5af683fb",
          "body": "BREAKING: API endpoints moved to Cadreen surface (/api/v1/cadreen/):\n- /api/v1/chat/completions → /api/v1/cadreen/chat/completions\n- /api/v1/tools → /api/v1/cadreen/tools\n\nAll three SDKs (TS, Python, Go) and CLI updated:\n- TypeScript @cadreen/sdk: 0.4.0 → 0.5.0\n- Python cadreen-sdk: 0.4.0 → 0.5.0\n- \n[…]\n- CLI @cadreen/cli: 0.1.0 → 0.2.0\n\nAlso:\n- Replace 'intelligence envelope' with 'response metadata' in all SDK READMEs\n- Update root README version table\n- Add changelog entries for v0.5.0 to all SDKs",
          "is_bot": false,
          "headline": "fix!: move SDK paths to Cadreen surface + v0.5.0",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T21:45:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a4810b9dc1cf4a673e1d9fc6f9f1db5e47a238c3",
          "body": null,
          "is_bot": false,
          "headline": "chore: move Homebrew formula to Formula/cadreen.rb",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T02:05:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d84c5ee8be6403cacd75b21f6b05cc55290a3e6",
          "body": null,
          "is_bot": false,
          "headline": "chore: update Homebrew formula SHA256 for v0.1.0",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:58:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b83b7004f0ecb664e272dad1e39b3bc85d2600b",
          "body": null,
          "is_bot": false,
          "headline": "fix: checkout master before pushing Homebrew formula update",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:57:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bf4410027c0897f5f7bbef634573e225b6921dd",
          "body": null,
          "is_bot": false,
          "headline": "docs: add npm README, remove 'ai' from keywords",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:53:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20180f09f4b6d97cb12b5df73762f02e7284e10e",
          "body": "…1.25",
          "is_bot": false,
          "headline": "fix: use go-version-file instead of hardcoded 1.22 — go.mod requires …",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:51:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b1bbf8805814c2e52bca954be31b19950bd06f3",
          "body": "… layout",
          "is_bot": false,
          "headline": "fix: render help overlay in TUI View() and account for help height in…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:45:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bd2734df01448134bc53407a26a494ace1cc3b3",
          "body": null,
          "is_bot": false,
          "headline": "fix: replace 'AI' with 'Cadreen' in all CLI copy",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:29:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c65bf98c713a2d73957354f5a0c4d02e4dea455d",
          "body": null,
          "is_bot": false,
          "headline": "ci: auto-update Homebrew formula SHA256 after release build",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61cdcbe68f579fe4ef09a8e99499f533323bef11",
          "body": null,
          "is_bot": false,
          "headline": "docs: add v0.4.1 changelog entry — RawJSON on ChatStreamEvent",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:14:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35d7bfb5745e373dbec10332c4e625f3072a71c5",
          "body": "…y, visual confirmation, header/footer, wizard, list model\n\nPhase 1: Core UX\n- Replace textinput with textarea (multi-line, Shift+Enter for newlines)\n- Add spinner.MiniDot in status bar during streaming\n- Add help overlay (? key toggle, human-language labels)\n- Add glamour markdown rendering in Cadr\n[…]\ner tick (was one-shot)\n- Bounds checks on messages[-1] and convID[:8]\n- Unconditional glamour init on first layout\n- Wire wizard to init --tui flag\n- Remove dead code (unused err field, unused styles)",
          "is_bot": false,
          "headline": "feat: enhanced TUI — spinner, textarea, glamour markdown, help overla…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T01:13:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e9e5b8c313e15a5b03f1c9ce683be0bed5754365",
          "body": "- Bubbletea TUI: root 'cadreen' launches split-pane chat with viewport,\n  text input, status bar, streaming, governance confirmation prompts\n- Color output: ANSI colors for errors (red), hints (yellow), try (cyan),\n  success (green), doctor checks (green/red/yellow)\n- First-run detection: unauthenticated root shows welcome with setup steps\n- Auth guidance: 'Not authenticated' now suggests 'cadreen init' specifically\n- Dependencies: bubbletea, lipgloss, bubbles, fatih/color",
          "is_bot": false,
          "headline": "feat: TUI, color output, first-run detection, improved auth guidance",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T00:36:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d795d24290c38cf85efaeba2d1db0c052b6a8f08",
          "body": "- CLI at go/cmd/cadreen/ with Cobra framework\n- Commands: init, login, logout, whoami, doctor, ask, chat, status,\n  config, memory list/add, policies list/evaluate, traces, tools,\n  update, completion, version\n- Streaming output via SDK ChatCompletionsStream\n- Governance confirmation flow via pendin\n[…]\nHub Releases\n- Release workflow: cli-v* tags trigger cross-platform builds\n- Install script, Homebrew formula, npm package for distribution\n- SDK: RawJSON on ChatStreamEvent, unused import fix, v0.4.1",
          "is_bot": false,
          "headline": "feat: add Cadreen CLI — 17 commands, streaming, governance, memory",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-20T00:15:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0c71c3b898ce4b41026aa9e1331d24dfdadea4c",
          "body": "- ProcessTrace.components: Record<string, boolean> → Record<string, unknown>\n- NoOpSpan/NoOpMeter: add parameter signatures to match TelemetrySpan/TelemetryMeter interfaces\n- Remove unused IntentResult imports from test files\n- Fix Error-to-Record cast in failures.test.ts",
          "is_bot": false,
          "headline": "fix: TypeScript build errors for v0.4.0 publish",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T21:37:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45db89e2a94a62789d574913109c9fe5a88579f6",
          "body": "…ing, conversation_id\n\n- Root README: add chat completions, streaming, tool discovery quick start examples\n- TypeScript README: add Chat Completions section (completions, streaming, tool chaining, tool discovery), v0.4.0 changelog, update resource table\n- Python README: add Chat Completions section (completions, streaming, tool chaining, tool discovery), v0.4.0 changelog\n- Go README: created from scratch with full API coverage (intent, chat, executions, marketplace, sandbox)",
          "is_bot": false,
          "headline": "docs: update all SDK READMEs for v0.4.0 — chat completions, tool call…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T21:30:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97a651e857101b95e519c00faac4cc2a7ef9d455",
          "body": "…cutionData\n\n- Fix chat completions and tools paths: /v1/* -> /api/v1/* across all 3 SDKs\n- Add Go SDK executions resource (ExecutionStream, GetExecutionStatus)\n- Add TS SDK IntentStream (invokeStream method)\n- Add Python SDK IntentStream (invoke_stream method)\n- Type Python ExecutionResult.execution as ExecutionData (TypedDict) instead of object\n- Update README version from 0.3.0 to 0.4.0",
          "is_bot": false,
          "headline": "fix: SDK path alignment, executions resource, IntentStream, typed Exe…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T16:44:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f16febfa66318d4e56656e1ee708ef8d8df02f6",
          "body": "The ExecutionAlias middleware converts 'mission' to 'execution' in responses.\nBoth SDKs only handled 'mission' type, causing execution results to silently\nbecome 'direct' with empty content. Now both handle 'execution' type with\nfallback to 'mission' fields for backward compatibility.",
          "is_bot": false,
          "headline": "fix: handle 'execution' type in TS and Python SDKs",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T16:35:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "399a2ce542359e9e771cae1012cf08bfe4656393",
          "body": "Go SDK:\n- ChatCompletionRequest.Model now has omitempty\n- Added version.go with Version constant\n\nTypeScript SDK:\n- Bumped to 0.4.0\n\nPython SDK:\n- Bumped to 0.4.0\n- Fixed silent error swallowing in completions_stream (now logs warnings)",
          "is_bot": false,
          "headline": "fix: SDK bugs and bump to v0.4.0",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T10:55:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7af060a0e60bd221fc9545591337add8f32f9796",
          "body": "All three SDKs now support conversation_id in ChatCompletionRequest.\nThis enables proper conversation tracking for governance and tool chaining.",
          "is_bot": false,
          "headline": "feat: add conversation_id to chat completion requests",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T09:36:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9635f202ed9e98d5bebaf0a21cf2eb44ed2dfc8c",
          "body": "Adds OpenAI-compatible chat completions and tool calling to the Python SDK:\n\nChatResource:\n- completions() for non-streaming requests\n- completions_stream() for async SSE streaming\n- list_tools() for tool discovery\n\nTypes:\n- ChatMessage, ChatToolCall, ChatFunctionCall\n- ChatToolDefinition, ChatFunctionDefinition\n- ChatCompletionRequest/Response\n- ChatCompletionChunk for streaming\n- ToolEntry, ListToolsResponse\n\nWired into Cadreen class as cadreen.chat",
          "is_bot": false,
          "headline": "feat: chat completions and tool calling support",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T08:54:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "126d4e374794869f148ab93ce9fa0d9fe24eac27",
          "body": "Adds OpenAI-compatible chat completions and tool calling to the TS SDK:\n\nChatResource:\n- completions() for non-streaming requests\n- completionsStream() for async iterable streaming\n- listTools() for tool discovery\n\nTypes:\n- ChatMessage, ChatToolCall, ChatFunctionCall\n- ChatToolDefinition, ChatFuncti\n[…]\non\n- ChatCompletionRequest/Response\n- ChatCompletionChunk for streaming\n- ChatStreamEvent union type\n\nHttpClient:\n- postStream() method for POST SSE streaming\n\nWired into Cadreen class as cadreen.chat",
          "is_bot": false,
          "headline": "feat: chat completions and tool calling support",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T08:46:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f06dab7f59c79af1e5378d1c19201c93c55e6c11",
          "body": "Adds OpenAI-compatible chat completions and tool calling to the Go SDK:\n\nChat Completions:\n- ChatCompletions() for non-streaming requests\n- ChatCompletionsStream() for streaming SSE responses\n- Full type support: ChatMessage, ChatToolCall, ChatToolDefinition\n- Tool result messages (role: tool) with \n[…]\nstTools() returns available tools as function definitions\n\nTypes:\n- ChatCompletionRequest/Response\n- ChatCompletionChunk for streaming\n- ChatStreamEvent for channel-based streaming\n- ListToolsResponse",
          "is_bot": false,
          "headline": "feat: chat completions and tool calling support",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T08:39:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe98bbbd1209d6cbfd5d1ce1510265cb1d85a818",
          "body": "TypeScript: 148 tests (14 files) — client, types, intelligence_helpers, telemetry, resources (intent/memory/policies/connections/executions/traces/webhooks/failures/skills), integration\nPython: 196 tests (12 files) — client, types, redaction, telemetry, resources (intent/memory/policies/connections/\n[…]\nntegration\nGo: 62 tests (9 files) — client, types, intent, memory, policies, connections, intelligence, assess, setup\n\nAll tests use sandbox mode exclusively — zero network calls, zero API keys needed",
          "is_bot": false,
          "headline": "test: add comprehensive test suites for all three SDKs",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-18T00:25:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd12a72f1e7fd2a815c29ecca510a460240b8665",
          "body": "…verifySignature()\n\nError subclasses:\n- CadreenBlockedError — thrown by intent.invoke() when governance blocks\n  action. Carries reason_code, policy_id, intelligence, traceId.\n- CadreenClarifyError — thrown by intent.invoke() when system needs\n  clarification. Carries questions, conversationId, inte\n[…]\nMAC-SHA256 comparison\n- Export webhooks property on Cadreen class\n\nOther:\n- Add @types/node as dev dependency for crypto module types\n- Export CadreenBlockedError and CadreenClarifyError from index.ts",
          "is_bot": false,
          "headline": "feat(ts-sdk): add CadreenBlockedError, CadreenClarifyError, webhooks.…",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-17T14:08:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab99890d13797636196c93c02eade1c596975fe3",
          "body": "CRITICAL:\n- TS SDK: added missing type exports (CatalogResponse, InstallResponse,\n  ReplayResult, HandoffPacket, PromoteResult, SetupProposal)\n- Python SDK: added missing marketplace type exports\n- Python SDK: policies.create/evaluate/guardrails.check/add use kwargs\n  (consistent with memory.remember, connections.register_openapi, etc.)\n- Go SDK: removed omitempty from Featured/Popularity fields\n- Python README: fixed to use kwargs style",
          "is_bot": false,
          "headline": "fix: final QA — missing exports, kwargs consistency, port matching",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-17T00:20:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3d6b1dcf7a64ee456b60561eb36bb531714b6b7",
          "body": "CRITICAL:\n- Python: setup() crash fixed (json= → positional arg)\n- Python: catalog() now parses tags field\n- TS: CatalogIntegration missing category field added\n- All SDKs: removed Composio types, methods, imports, exports\n\nREADME fixes:\n- Python: fixed broken examples (intent→ask, policy/memory signatures)\n- TS: fixed property paths (result.policy.reason→result.reason_code)\n- Both: removed provider name leaks, updated changelog",
          "is_bot": false,
          "headline": "fix: comprehensive QA — remove Composio, fix types, fix examples",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-16T23:58:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad8d532f6ef9029d594dba811fd6b5cb8d260882",
          "body": "…field\n\nCRITICAL: Python SDK — add missing ComposioToolkit import (search_composio crashed)\n\nWARNING:\n- SearchComposioResponse: field renamed toolkits (was results, matched backend)\n- CatalogIntegration: added tags field (Go backend returns it)\n- Python connections.py: search_composio uses toolkits key",
          "is_bot": false,
          "headline": "fix: QA findings — missing import, field name mismatch, missing tags …",
          "author_name": "timothy-billingrails",
          "author_login": "timothy-billingrails",
          "committed_at": "2026-06-16T23:36:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 11,
      "commits_last_year": 113,
      "latest_release_at": "2026-07-21T07:39:27Z",
      "latest_release_tag": "cli-v0.4.2",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 3.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/timothy-billingrails/cadreen-sdks/go",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/timothy-billingrails/cadreen-sdks/go",
          "is_deprecated": false,
          "latest_version": "v0.7.2",
          "repository_url": "https://github.com/timothy-billingrails/cadreen-sdks",
          "versions_count": 12,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T07:06:33Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        },
        {
          "name": "@cadreen/mcp",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": null,
          "registry_url": "https://www.npmjs.com/package/@cadreen/mcp",
          "is_deprecated": false,
          "latest_version": "0.1.2",
          "repository_url": null,
          "versions_count": 2,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 226,
          "first_published_at": "2026-07-14T07:58:25.705000Z",
          "latest_published_at": "2026-07-21T07:30:59.618000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        },
        {
          "name": "cadreen-sdk",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "pypi",
          "matches_repo": null,
          "registry_url": "https://pypi.org/project/cadreen-sdk/",
          "is_deprecated": false,
          "latest_version": "0.7.2",
          "repository_url": null,
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2026-06-08T00:53:44.218490Z",
          "latest_published_at": "2026-07-21T07:34:42.511327Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        },
        {
          "name": "@cadreen/sdk",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "cadreen",
            "sdk",
            "intelligence",
            "automation",
            "governance"
          ],
          "ecosystem": "npm",
          "matches_repo": null,
          "registry_url": "https://www.npmjs.com/package/@cadreen/sdk",
          "is_deprecated": false,
          "latest_version": "0.7.2",
          "repository_url": null,
          "versions_count": 14,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 1456,
          "first_published_at": "2026-06-08T01:01:57.448000Z",
          "latest_published_at": "2026-07-21T07:29:43.044000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        },
        {
          "name": "@cadreen/cli",
          "exists": true,
          "license": "UNLICENSED",
          "keywords": [
            "cadreen",
            "cli",
            "governance",
            "memory",
            "intelligence",
            "openai",
            "ai",
            "automation",
            "orchestration",
            "llm",
            "agent",
            "tool-calling",
            "policy"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@cadreen/cli",
          "is_deprecated": false,
          "latest_version": "0.4.2",
          "repository_url": "https://github.com/timothy-billingrails/cadreen-sdks",
          "versions_count": 11,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 1469,
          "first_published_at": "2026-06-20T02:01:01.965000Z",
          "latest_published_at": "2026-07-21T07:32:17.803000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "mcp/tsconfig.json",
        "python/cadreen/py.typed",
        "typescript/create-cadreen-app/template/tsconfig.json",
        "typescript/tsconfig.json"
      ],
      "toolchain_manifests": [
        "go/go.mod"
      ],
      "largest_source_bytes": 51821,
      "source_files_sampled": 174,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go/go.mod",
        "mcp/package.json",
        "npm-cadreen/package.json",
        "python/pyproject.toml",
        "typescript/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 95,
        "malicious_count": 0,
        "assessed_package": "npm:@cadreen/mcp@0.1.2",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "github.com/charmbracelet/bubbles",
          "manifest": "go/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.10"
        },
        {
          "name": "github.com/charmbracelet/glamour",
          "manifest": "go/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1-0.20250404203927-76690c660834"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "go/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "mcp/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.0"
        },
        {
          "name": "zod",
          "manifest": "mcp/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.22.0"
        },
        {
          "name": "httpx",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.25"
        },
        {
          "name": "httpx-sse",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.4"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 3,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "timothy-billingrails",
          "commits": 105,
          "avatar_url": "https://avatars.githubusercontent.com/u/135520596?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "release-cli.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 3,
            "reason": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/20 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "19 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "75a31c6dbffd388c876df2275485b7e48f5cf4a8",
        "ran_at": "2026-07-23T20:15:35Z",
        "aggregate_score": 2.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T07:50:10Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-21T07:06:33Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/timothy-billingrails/cadreen-sdks",
    "host": "github.com",
    "name": "cadreen-sdks",
    "owner": "timothy-billingrails"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 48,
      "inputs": {
        "security": 34,
        "vitality": 71,
        "community": 32,
        "governance": 42,
        "engineering": 54
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 113,
              "human_commit_share": 0.92,
              "days_since_last_push": 1,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "113 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 113
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 11,
              "latest_release_tag": "cli-v0.4.2",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 3.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "11 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~3.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 3.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "github.com/timothy-billingrails/cadreen-sdks/go",
                "@cadreen/mcp",
                "cadreen-sdk",
                "@cadreen/sdk",
                "@cadreen/cli"
              ],
              "dependents": null,
              "ecosystems": "go, npm, pypi",
              "total_downloads": null,
              "monthly_downloads": 3151
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "3,151 downloads/month across go, npm, pypi",
                "points": 46.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 3151,
                      "ecosystems": "go, npm, pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 42,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 54,
            "inputs": {
              "merged_prs": 3,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "3/4 decided PRs merged",
                "points": 28.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 3,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/20 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "critical",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 23,
            "inputs": {
              "followers": 0,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "timothy-billingrails",
              "public_repos": 1,
              "account_age_days": 1145
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of timothy-billingrails",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "timothy-billingrails"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1 public repos, account ~3 yr old",
                "points": 8.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/timothy-billingrails/cadreen-sdks/go",
                "@cadreen/mcp",
                "cadreen-sdk",
                "@cadreen/sdk",
                "@cadreen/cli"
              ],
              "ecosystems": "go, npm, pypi",
              "any_deprecated": false,
              "min_days_since_publish": 2
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "5 package(s) on go, npm, pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 5,
                      "ecosystems": "go, npm, pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 2 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 54,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "https://cadreen.com",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://cadreen.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 34,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 21,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 2.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/20 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "19 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:@cadreen/mcp@0.1.2 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@cadreen/mcp@0.1.2",
                  "assessed": 95
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 95,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.14 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.14 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 95,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 52,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.913,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "84 of 92 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 84,
                      "sampled": 92
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "mcp/tsconfig.json",
                "python/cadreen/py.typed",
                "typescript/create-cadreen-app/template/tsconfig.json",
                "typescript/tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go/go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go/go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "mcp/tsconfig.json, python/cadreen/py.typed, typescript/create-cadreen-app/template/tsconfig.json, typescript/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "mcp/tsconfig.json, python/cadreen/py.typed, typescript/create-cadreen-app/template/tsconfig.json, typescript/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 51821,
              "source_files_sampled": 174,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/174 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 174,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T20:15:44.200057Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/timothy-billingrails/cadreen-sdks.svg",
  "full_name": "timothy-billingrails/cadreen-sdks",
  "license_state": "standard",
  "license_spdx": "MIT"
}