tmfadhlul/claude-code-profile erreicht einen Gesundheitsindex von 49 von 100 und liegt damit im Bereich Gefährdet. Am stärksten schneidet es bei Vitality (69/100) ab, am schwächsten bei Community & Adoption (35/100). Zuletzt vor 5 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
49
gesamt / 100
Gefährdet
Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
49
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Liefert Releases aus — 15 Versions-Tags (keine GitHub-Releases)
36/36
Release-Aktualität — letztes Release vor 8 Tagen
27/27
Release-Rhythmus — ein Release etwa alle 1,2 Tage
0/10
OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count
15
latest_release_tag
v0.12.0
releases_from_tags
ja
days_since_latest_release
8
mean_days_between_releases
1,2
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
5
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:claude-account-sync@0.12.1 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 5 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
Handhabbare Dateigrößen — 0/115 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_language
TypeScript
largest_source_bytes
29.091
source_files_sampled
115
oversized_source_files
0
Eckdaten
3GitHub-Sterne
1Mitwirkende
159Commits, letzte 12 Monate
5Tage seit letztem Push
15Releases
1Bus-Faktor
0offene Issues
npmPaket-Ökosysteme
Warnungen zur Datenerhebung
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 2 ⇿
0Sterne
2Forks
8Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 0Minor 5Patch 3
OpenSSF Scorecard 3.1 / 10
3.1Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-25 18:42 UTC
Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Abhängigkeits-Advisories 0
Die Installation von npm:claude-account-sync@0.12.1 zieht 5 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 588,
"has_wiki": false,
"homepage": null,
"languages": {
"CSS": 5670,
"HTML": 266,
"JavaScript": 3069,
"TypeScript": 523738
},
"pushed_at": "2026-07-19T19:37:14Z",
"created_at": "2026-07-04T22:30:53Z",
"owner_type": "User",
"updated_at": "2026-07-19T19:37:18Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Teuku Fadhlul",
"type": "User",
"login": "tmfadhlul",
"company": null,
"location": null,
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/37733393?v=4",
"created_at": "2018-03-24T09:08:38Z",
"is_verified": null,
"public_repos": 19,
"account_age_days": 3045
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-07-17T07:54:15Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2026-07-13T01:06:50Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-07-13T00:45:12Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-07-13T00:06:32Z"
},
{
"tag": "v0.9.2",
"kind": "patch",
"published_at": "2026-07-12T23:42:03Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2026-07-12T23:21:34Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-07-12T22:18:36Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-07-10T05:08:36Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-07-06T09:36:15Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-07-06T09:01:54Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-07-06T08:49:36Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-07-06T04:01:04Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-05T21:34:18Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-05T16:23:22Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-05T09:39:14Z"
}
],
"recent_commits": [
{
"oid": "24a7602ddd7d0f8046ee213707b158a83d30dfb0",
"body": "…xable plugin drift loop\n\nTwo defects in discovery's read of installed_plugins.json, both surfacing as\n`clp fix` failing or looping forever.\n\n1. Project-scope installs were counted as profile plugins. `installedPlugins`\n used Object.keys(plugins) with no scope filter, so a profile holding a\n plu\n[…]\ngain, forever. A versionless\n plugin now contributes no drift signal; detecting nothing beats detecting\n noise with no remedy.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.8.1, claude-account-sync 0.12.1 — fix unfi…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-19T19:36:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "74598db9e2a348b94b04a69cdb1d5d9b822c4359",
"body": "…ofile plugin version drift detection + `clp fix`\n\nMotivated by a real incident: mismatched claude-mem versions across six\nClaude profiles fought over the single shared ~/.claude-mem worker — each\nsession killed the other's worker and respawned its own, orphaning a\nchroma-mcp child every cycle until\n[…]\n achievable\ninvariant — hence every holder is updated, not just the laggard.\n\n330 tests (was 311). npm run build + npm test green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.8.0, claude-account-sync 0.12.0 — cross-pr…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-17T07:54:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "94cef7be904234f7a25f5a921f37f4a535aef371",
"body": "…petual codex mcp drift and doctor/migrate rc-key mismatch\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.3, claude-account-sync 0.11.1 -- fix per…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T01:06:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4d9802543182d9ae8c7203fb5a94abb827afba59",
"body": "…or reuses secrets-migrate's own detection\n\nTwo independent bugs found live on a real machine:\n\n1. clp status/adopt never converged for Codex profiles whose config.toml\n has an env table AND a field outside McpServerSchema (e.g. Codex's\n startup_timeout_sec). sortKeys() only sorted the top-level\n[…]\nid 'nothing to fix', with no way out. doctor now calls\n migrateRcSecrets(ctx, {dryRun:true}) directly, so the two can never\n disagree again.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: recursive MCP-drift comparison (perpetual codex sync loop); doct…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T01:03:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c021a49ef7e11efb62f454b038624f6e08066ef",
"body": "…s-device sync crash on large plugin caches, better sync diagnostics, staged loading UI\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.2, claude-account-sync 0.11.0 — fix cros…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:45:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a82a4981d7f704511ccd0ec23366f01c58fa0673",
"body": "… on real installs\n\ncollectAssets treated plugins/ like skills/commands (whole-directory copy),\nbut plugins/ is marketplace git clones + installed-plugin caches — routinely\nmulti-GB (3.9GB on the reporting user's machine). JSON.stringify inside\nsealJson exceeded V8's max string length trying to seri\n[…]\nwired into\nsync/import — file-copying plugins/ was both redundant and, at real scale,\nfatal. Removed 'plugins' from the hub-asset dirs entirely.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sync): stop walking plugins/ as a hub asset — it crashed sealJson…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:23:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "669709960d6b9de928deda08d8804dd09fe7ec20",
"body": "…tates in the dashboard\n\nsyncserver's catch block swallowed every /manifest failure with zero logging\nanywhere (client only ever saw the generic 'internal error', and the machine\nrunning 'clp serve' had no way to diagnose it either) — a Windows user hit\nthis on first pull. Now logs to the serving pr\n[…]\n visual indicator — added a spinner plus honest staged status text\nthat reflects what each request is actually doing, instead of a frozen label.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sync): log the real /manifest error server-side; staged loading s…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:18:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "edad99cdf3eb5e40ebccb369b4ef52c3936d4996",
"body": "…, version in UI, -v alias\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: claude-account-sync 0.10.0 — pair devices from the dashboard…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:06:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1521192c025b05cbe851470ef05187d99735c850",
"body": "…v alias\n\nPOST /api/pair drives the same PIN-authenticated pairing as clp pair, with a\nPair-device dialog on the Sync page (host/port/PIN/name) — pairing no longer\nrequires the CLI on the receiving machine. GET /api/version feeds a version\nline in the sidebar; the CLI gains -v as a version alias.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): pair devices from the dashboard; show version in sidebar; -…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:04:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5e0f15af012ab2b23337151e84b21268657d6b4e",
"body": "…ns apply\n\nThe pulled manifest declared plugins but nothing installed them on the peer —\nsync/import now reconcile every claude profile (best-effort, with a pointer to\n'clp plugins apply --all' when claude isn't available). plugins apply is the\nstandalone make-live-match-manifest verb. release cli 0.9.4.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(sync): install plugins after cross-device sync/import; add plugi…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:58:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fb7729ddde85e2d2e48a6ea6129f1c0e0ede7b4e",
"body": "…des, dark-mode dashboard; release cli 0.9.3\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — plugins matrix, cross-agent handoff, Anthropic auth mo…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:50:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0dd64e95b53060f1dc8dd76b7b59180103e0732a",
"body": "…concile uses installed state\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.1, claude-account-sync 0.9.2 — plugin re…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:42:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e268998184544b291f5e1ab276f3e3049c330c6a",
"body": "…gins\n\nThe retired union-sharing feature left enabledPlugins entries in settings.json\nfor plugins that were never installed. Reconcile derived 'current' from\nenabledPlugins, saw them as present, and never ran 'claude plugin install' —\nso a synced plugin was listed as enabled but had no commands/skills/MCP.\nLiveProfile now exposes installedPlugins (keys of installed_plugins.json)\nand reconcile diffs against that ground truth.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): reconcile against installed state, not stale enabledPlu…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:39:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c1ae232b7f9be28dc6efb9d495159482bf5c99f1",
"body": "providerAuthMode derived the mode purely from token-value emptiness, so\nselecting API key / Auth token from the login state recomputed back to\n'login' and the token field never appeared. Track the chosen mode as\nexplicit UI state instead. Verified in a browser (Playwright): all three\nmodes switch and reveal the correct token var. release cli 0.9.1.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ui): Anthropic auth-mode selector was stuck on CLI login",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:21:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9cd82bd50e8562133acb6d3476cc49abb5262591",
"body": "…nt handoff, plugins v2 (MCP-style), audit hardening, Anthropic auth-mode\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.0, claude-account-sync 0.9.0 — cross-age…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:18:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "049132a6ad538d581deda62e153b1dedad4c7c39",
"body": "Anthropic-default provider (empty base URL) now shows a CLI login / API\nkey / Auth token selector instead of the plain info blurb, wired to the\ncore anthropicAuthMode concept via a new providerAuthMode(form) helper.\nCustom providers keep the existing tokenVar toggle unchanged.",
"is_bot": false,
"headline": "feat(ui): 3-way Anthropic authentication selector in the provider editor",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43810e60f75ef7f97ff13ea28fd2741006d8e7c",
"body": "…or paths",
"is_bot": false,
"headline": "fix(cli): validate base URL before storing provider secret; cover err…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:07:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3480b7c26d0da31a4bdc356cfde56017675af193",
"body": "…oken)",
"is_bot": false,
"headline": "feat(cli): provider anthropic auth-mode command (login/api-key/auth-t…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:00:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab2d88fd0ba84afa1ed514b9d904052627838675",
"body": null,
"is_bot": false,
"headline": "feat(core): Anthropic auth-mode derive/set helpers",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T21:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0261f05528572895ba6ca1455daed48fab616166",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Anthropic auth-mode implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T21:56:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2aa701d14e1f2ccddf3180ad04886cfcfd7169f8",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Anthropic provider auth-mode design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T21:54:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "aaee76cb44e92280c99190d8070701fab9988833",
"body": "Add a full dark OKLCH token palette (same hue family as light, not a\nnaive invert) under both prefers-color-scheme and an explicit\n[data-theme] override, plus a persisted sidebar toggle (localStorage\nccp-theme) that stamps data-theme on <html>. Add semantic\nsuccess/warning/info tokens so status pill\n[…]\ncol\"/\"row\" on headers.\n\nAlso fixes the 3 pre-existing UI tsc strict errors from Task 12\n(NAV/TABS tuple-union inference, Toaster position prop) so\n`tsc -p packages/ui/tsconfig.json --noEmit` is clean.",
"is_bot": false,
"headline": "feat(ui): dark mode + diff/table accessibility",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:52:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b9da40a5ecb94883faa4dd200c83ab8ba79fb43",
"body": "…routing, sync preview\n\nTask 12 of audit remediation: matrix toggles now track in-flight cells as a\nSet (no more 2nd-click-clears-1st-click race) with a visible spinner;\ndestructive actions (mcp/plugin sync-to-all, skip-permissions-on, secret\ndetach) now confirm; the boot token is scrubbed from the \n[…]\n patch + add/rm loop; ProfilesPage and\nSecretsPage fetch in parallel; tabs are backed by location.hash for\nrefresh/deep-link/back support; and SyncPage previews a dry-run before\npulling from a device.",
"is_bot": false,
"headline": "fix(ui): toggle race, destructive confirms, token scrub, batch save, …",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:41:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c65be64c9e522156a3f45a024ad255fcfaafa3fa",
"body": "…h profile apply\n\n- scanSessions (core/src/sessions.ts) now caches parsed per-file session\n metadata keyed by (mtimeMs, size); unchanged transcripts are served from\n cache instead of re-read+re-parsed on every GET /api/sessions. Also caps\n bytes read per file and per scan request, marking oversiz\n[…]\nsired MCP set) and applies it in the same single save+apply as the\n other fields, instead of requiring a patch + N separate add/rm calls.\n Back-compat with the existing per-field patch is unchanged.",
"is_bot": false,
"headline": "fix(api): cache session scan, cap body size, 404 unknown secret, batc…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:27:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "534f75fff1f79345998deeaa683b459953ec4848",
"body": "- cli/core prepack now rebuilds from repo root before packing, so a\n stale local `dist/` can't silently ship\n- add packages/core/README.md and an explicit exports map (core\n previously had no README and no conditional exports)\n- document why root package.json pins vite via overrides",
"is_bot": false,
"headline": "chore: rebuild-on-prepack, ccprofiles-core README, exports map",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6426b1c1c97c088dbc3bcf09be8b8c20daf3e15",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): --version/--help exit 0 (honor commander exit code)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:16:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3f7ff6aa6aeda20777c1922ddd9c40dc11f13b5e",
"body": "`secrets set <name>` no longer requires the secret as a plaintext argv\npositional (which leaks into shell history and `ps`): with no value it\nreads from a masked stdin prompt (raw-mode, no echo), injectable via\nctx.promptSecret for tests. Passing the value explicitly still works,\nnow with a stderr w\n[…]\nwires up\n`ccprofiles --version`/`-V`, reading the version from the cli\npackage.json via createRequire (works under NodeNext ESM without\nresolveJsonModule, resolves the same from src/ and built dist/).",
"is_bot": false,
"headline": "feat(cli): masked secrets-set prompt + argv warning; --version flag",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:15:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4d7db0d98cdcaf938bc58ec5061712d25f2670b",
"body": "…lures\n\nisWithin used process.platform (the host OS) instead of the target\nPlatform.os already threaded through planApply, so it silently\nmisjudged link containment whenever a plan was built for a different\nOS than the one running it (e.g. win32-target paths on a posix host,\nsince node's bare relati\n[…]\nt history. Now only those two\ncases are swallowed; other failures warn on stderr without throwing\n(manifest.yaml is already written by then). The Task 3 plaintext-secret\ncommit-skip path is unchanged.",
"is_bot": false,
"headline": "fix(core): thread Platform.os in isWithin; don't swallow real git fai…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:10:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "980e6937b058f100e0542d3fb1531b23cc9eeeb7",
"body": "…cy plugin restore\n\nThree correctness fixes: (a) planApply now strips the Claude-only `type`\nfield from desired MCP server defs on codex profiles, mirroring\nwriteCodexMcpServers, so the drift check converges instead of re-emitting\nset-mcp-servers on every apply; (b) toTemplate now requires a path-se\n[…]\nmistemplated; (c) restoreLegacyPluginSymlink now throws instead of\nunlinking the symlink when its pool target is missing, so a profile's\nplugins/ can never be silently replaced with an empty real dir.",
"is_bot": false,
"headline": "fix(core): codex MCP drift converges; home-prefix boundary; safe lega…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:01:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d310bb64450206e5848095adf3f69523c54cd58",
"body": null,
"is_bot": false,
"headline": "fix(core): thread real pool root (CCPROFILES_HOME) into buildManifest",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:58:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "698b1951f20d9d45f69450c0007120f4dbe9d6b7",
"body": "…t plain links\n\nbuildManifest recorded pool symlinks (claude projects/todos/shell-snapshots,\ncodex sessions) as plain `links` entries and hardcoded sharedSessions: false.\nThe next apply then saw \"linked to pool\" + \"sharing off\" and emitted\nunshare-session-dir, copying the entire by-project shared po\n[…]\nntry> as pooled: it sets\nsharedSessions: true instead of adding a links entry. CLAUDE_SHARED_ENTRIES\nand CODEX_SHARED_ENTRIES are now exported from apply.ts so both sides use the\nidentical entry list.",
"is_bot": false,
"headline": "fix(core): adopt recognizes pooled session dirs as sharedSessions, no…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:51:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3079b81b526c76269b8d7200d3979ea3e0c63aa7",
"body": "… import warning\n\nwriteAssets clobbered local hub skills/commands and per-profile\nCLAUDE.md/AGENTS.md with no recovery path when sync --from <device> or\nbundle import wrote over existing files (apply.ts already backed up\neverything else — this was the gap). writeAssets now takes an optional\n{ backup\n[…]\nync route now\nthread ctx.backupRoot + stamp() through. Also updates bundle import's\n--yes confirmation text to call out that local skills/commands/guidance\nfiles will be overwritten (backed up first).",
"is_bot": false,
"headline": "fix(core): back up assets before writeAssets overwrites them; clearer…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:46:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8be8d53d4784e08164eb8354d12c9b096d38f2e8",
"body": "A corrupt or unreadable .claude.json/settings.json/config.toml was being\ntreated the same as a genuinely missing file, so set-mcp-servers and\nset-settings-env would silently wipe oauthAccount/projects/hooks/etc by\nreplacing the whole file with just { mcpServers } / { env }. Now only a\nreal ENOENT proceeds as a new file; any other read or parse failure on an\nexisting file backs it up and aborts the action instead.",
"is_bot": false,
"headline": "fix(core): never replace a config whose existing content is unreadable",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:41:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf77d5ae2eddc1599e2a9bf073bf993e047cd78b",
"body": null,
"is_bot": false,
"headline": "fix(core): doctor surfaces plaintext-secret manifest (UI-visible)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:37:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba97a2d55cc9e3979957a1b92358c9f03399ed3e",
"body": "…octor warns on remote\n\nsaveManifest still writes manifest.yaml (0600) when the serialized YAML\nmatches a plaintext token pattern (sk-ant-*, sk-*, AKIA*), but now skips\nthe git add/commit so the secret never lands in ~/.ccprofiles git\nhistory, warning via stderr instead. Manifests with only secret:/\n[…]\ntor)\nthat warns if the manifest root's git repo has any remote configured,\nsince that would let manifest/secrets history be pushed off-machine.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core): refuse to git-commit a manifest with a plaintext secret; d…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:31:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e7f2b50cf18af7b9b34c333cd3942026f31f7df",
"body": "Close the argv/flag-injection gap: profile names, launchers, marketplace\nnames/sources, and both halves of a plugin id could start with '-' and\ninject a flag into `claude plugin` or the shell launcher. SAFE_NAME and\nSAFE_SOURCE now forbid a leading hyphen while still allowing internal\nhyphens. Profi\n[…]\nsted positional in `plugin install`/`uninstall`/`marketplace add`\nargv — verified against the installed `claude` binary that `--` is\naccepted and correctly stops flag parsing for a leading-dash value.",
"is_bot": false,
"headline": "fix(core): reject leading-dash identifiers; forbid .. in profile dir",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:23:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83fa3507a1c25dd9839887a7eb21437a962aed9d",
"body": "…m tests",
"is_bot": false,
"headline": "fix(core): 0700 manifestRoot before git init; manifest.yaml 0600; per…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:19:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "305949adda488db6a5a9cafa1092b1d460ef10c1",
"body": "Secret-bearing files (devices.json's pairing key/token, secrets.enc,\nsecret-names.json, secrets.dpapi.json, and applied settings.json with\nresolved secret:// env values) were written world-readable (~0644).\natomicWrite now accepts { mode?: number } and chmods explicitly after\nrename to sidestep umask surprises; every secret call site passes\n0o600. manifestRoot and the backups dir are created 0o700 wherever\nthey're first made, since secrets.enc/devices.json live directly in\nmanifestRoot.",
"is_bot": false,
"headline": "fix(core): write secret-bearing files 0600 / dirs 0700",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0261c3d5574f3dea0bf8faaf87af92ad007b3a6",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: audit remediation implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:05:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae98465b36b14be3ec56c4db80a4c30274a951e1",
"body": "…path",
"is_bot": false,
"headline": "fix(core): adopt filters orphan plugin ids; test uninstall reconcile …",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:58:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dea331ce667cba2d8823bfea754ab7977fb8cdee",
"body": "Mirrors McpPage: matrix rows are the union of profile plugin ids,\nSwitch toggles call addPlugin/rmPlugin, Add dialog collects id +\nmarketplace source. Adds Plugins nav tab in App.tsx.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(ui): Plugins matrix page",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:48:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4c7011061f3044f29c4c9ef76b60e7e1949e8fab",
"body": "Mirrors /api/mcp's GET/POST/DELETE/sync shape for Claude Code plugins,\ndriving the same reconcile-via-runner flow the plugins CLI command uses.\nExtracted reconcilePlugins() out of commands/plugins.ts (alongside the\nnow-exported claudeRunner()) so the CLI and the UI API share one\nimplementation inste\n[…]\ncit\ncodex target 400s across add/delete/sync, matching the CLI's guard.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(api): /api/plugins routes (matrix + add/rm/sync reconcile)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:42:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "85c241fa5f20a3c28bec97f92f39f55a7d05dd51",
"body": null,
"is_bot": false,
"headline": "fix(cli): reject codex profiles as explicit plugin targets",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:37:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c23c82b099c1eca07004a70efa3919e475e77396",
"body": "Mirrors the mcp command: mutates manifest plugins[]/marketplaces then\nreconciles live profiles via a PluginRunner (real: shells out to\n`claude plugin install/uninstall/marketplace add` with CLAUDE_CONFIG_DIR;\ntest: injected via ctx.pluginRunner). adopt's buildManifest now derives\nthe marketplaces registry and each profile's plugins[] from discovery.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(cli): plugins list/add/rm/sync driving claude plugin CLI + adopt",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:30:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "399fd8b9cdbc82bef315a4d2ebf75a6f59623e08",
"body": "Adds pure/injectable plugin reconciliation logic for plugins-v2:\nPluginRunner interface, planPluginReconcile (set diff), marketplaceOf\n(id -> marketplace name), reconcileProfilePlugins (uninstall removed,\nthen marketplace-add once per new marketplace + install), and\nrestoreLegacyPluginSymlink (repla\n[…]\ncore/src/index.ts for\nconsumption by the CLI (Task 5) and API (Task 6).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): plugin reconciler (planner + runner iface + legacy restore)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:25:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8655f90b78ee0ccf62b314a62e650253f6b3db37",
"body": null,
"is_bot": false,
"headline": "feat(core): discovery reads plugin marketplaces",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:22:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03af125103432944d67b82e3a362fa81507d782a",
"body": null,
"is_bot": false,
"headline": "feat(core): manifest plugins[] + marketplaces registry",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffef992d4029dd8ae5269466902575037fb55305",
"body": "…del)",
"is_bot": false,
"headline": "revert: remove symlink/union plugin sharing (replaced by MCP-style mo…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "584f44af58e53b244d6b21e07084c7d4dc0418d0",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugins v2 MCP-style implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:00:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3a08d927249ec044b08d36abfea7072088467c92",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugins v2 — MCP-style per-profile management design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T12:51:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0692253d3e4ff9ff143a2493017bb6f86e73965a",
"body": "Wires the core handoff helpers (Tasks 1-2) into a CLI verb:\n`handoff --from <p> --to <p> [--print]` resolves both profiles, finds\nthe current cwd's latest source session (accounting for pooled vs.\nisolated session scope), renders+writes the transcript under\n<manifestRoot>/handoffs, resolves the targ\n[…]\ngent directly.\n\nRegistered in context.ts after registerSessionCommands.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(cli): handoff command — open target agent seeded with prior session",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:50:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fadf41bb0317924f9d9296cd48958a57a703c3f9",
"body": null,
"is_bot": false,
"headline": "feat(core): launcher handoff intercept (posix + pwsh)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edefe2c7c11493f12609a19910a68df1e38e38c1",
"body": "…ld launch",
"is_bot": false,
"headline": "feat(core): handoff helpers — find last session, render markdown, bui…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9871c7689cc8cb070001e46b3129342c80e1b767",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: cross-agent handoff implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5b0a1174872fcb32a1e193ec6a91963aff88cb9c",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: cross-agent session handoff design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f3913dbdebb315015bfd91c454e7874c0fc8ddd5",
"body": null,
"is_bot": false,
"headline": "fix(core): report plugin backup dir + unshare wording + idempotency test",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f2ca4515f2c26668968e345efc3e6fbd1d6291a",
"body": "GET /api/profiles now returns sharedPlugins, PATCH accepts and validates\nit as a boolean (400 on non-boolean), mirroring the existing\nsharedSessions handling. The profile editor gets a claude-only \"Share\nplugins pool\" toggle (not launcher-gated) that warns about the\nseed-or-adopt behavior before enabling it on a non-first profile.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(ui): sharedPlugins on profiles API + editor toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:37:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cc245be228e7d909a8b37673c9173079c95b60f0",
"body": "Mirrors the sessions CLI command: flips sharedPlugins on the named\nprofile, saves the manifest, and re-applies actions so the plugins\ndir gets pooled/unpooled and enabledPlugins gets unioned.",
"is_bot": false,
"headline": "feat(cli): plugins share/unshare command",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5861422454e8229f23473f6da96ab6a044964d3a",
"body": "Adds seed-or-adopt plugin dir sharing (first shared profile seeds the\npool, later profiles adopt via symlink) and unshare (snapshot pool back\nto a real dir), plus set-enabled-plugins which writes the union of\nenabledPlugins across shared Claude profiles into each settings.json.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): share-plugins-dir + enabledPlugins union apply actions",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:27:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4a42fe728d1d14e7ad6b49c1f43c4c9ee46a50f3",
"body": "TS2741 was latent because tsc -b excludes test/ and vitest doesn't\ntype-check; adding the required enabledPlugins field to LiveProfile\nbroke the two direct object literals in adopt.test.ts.",
"is_bot": false,
"headline": "test(core): backfill enabledPlugins in LiveProfile fixtures",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06a05c4fded25dbef46a745470ac2cfbc27edc8e",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): discovery reads enabledPlugins from settings.json",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:20:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "514892d48a4516d47bc3e49f44a1ac2994baf67f",
"body": "Mirrors sharedSessions: a new boolean field on ProfileSchema (default\nfalse) that Tasks 3-5 will use to gate plugin config sharing across\nprofiles. Every ProfileDecl object literal in src/ and test/ updated\nto set it alongside sharedSessions.",
"is_bot": false,
"headline": "feat(core): add sharedPlugins flag to profile schema",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0468bbe47f05432fed2fb265ab4d886336c0d9b7",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugin sharing implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:12:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1a513b362e4b06fed9844530372a69a91adb3243",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugin sharing across profiles design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:01:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "86ddbde9508f0771581a9dd9f7682120ac087a74",
"body": "…ranscript viewer, codex user-scope MCP, cross-agent MCP sync\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "release: ccprofiles-core 0.6.0, claude-account-sync 0.8.0 — session t…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T05:08:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "83d3bc5dc2e92bc814b4e4da4be82942d105bcce",
"body": "Read a session's full message thread (role/text/label/timestamp) via a new\ncore reader + API route, rendered inline in the Sessions page. Guards session\nids and caps entry size.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat: in-dashboard session transcript viewer (Claude + Codex)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T05:07:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "661a7135324a1e40502550c726d8d97fa5c2b4f0",
"body": null,
"is_bot": false,
"headline": "chore: add Ko-fi funding link",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T04:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ba734037d1745a3966115da62c540867964c6be",
"body": null,
"is_bot": false,
"headline": "chore: align npm bin metadata",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T04:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "236df471a12fad63a5f0b55c902c73bf05330b1f",
"body": null,
"is_bot": false,
"headline": "feat: revamp dashboard and safely share agent assets",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T04:15:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "196a12212a94488485de5d6546494fe69728f792",
"body": "…roject launchers\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: README — cross-agent MCP sync + Codex user-scope filtering of p…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T03:36:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6473cc1b6433d4b12c6bbf9b3d6292195d7c619f",
"body": "…serve them on write\n\nCodex keeps all MCP servers in one flat global mcp_servers table with no scope\nmarker, so per-project launchers (e.g. CCE 'cce serve --project-dir <path>') leak\ninto clp's user-scope matrix. readCodexMcpServers now filters out --project-dir\nlaunchers; writeCodexMcpServers preserves any it finds so apply never deletes them.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "fix(codex): treat MCP as user-scope — hide project-dir launchers, pre…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T03:19:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c8d11cc7053293516943d4b1e498686861e95ff1",
"body": null,
"is_bot": false,
"headline": "feat: share resumable Codex sessions across profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f8d65735d2263a14baae830e9a9f876e8d87ee5",
"body": null,
"is_bot": false,
"headline": "fix: harden session viewer scan + use agent-aware profile name in CLI",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:37:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b8856365d2297c5627d8097d36aa88a55b978a1",
"body": "Adds the sessions API client method, a read-only Sessions\nprojects/sessions browser page with a nav tab, and a (non-launcher-gated)\nsharedSessions checkbox in ProfileEditor wired into the patchProfile call.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(ui): Sessions page + sharedSessions toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:24:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cff2e50258a2412196e67c26638f91a769fdc1df",
"body": "Surfaces the sharedSessions flag on GET/PATCH /api/profiles and adds\nGET /api/sessions returning scanSessions() over all live profiles.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(api): sessions route + sharedSessions on profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:16:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dfab9e1dfe37630193b2a7d525df6d284c1b6d99",
"body": null,
"is_bot": false,
"headline": "feat(cli): sessions share/unshare/list command",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:10:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9750b3235cb40d1e76a9ef8ab19be3e61a8babc9",
"body": "Concurrent feature completed in the working tree, committed as one unit\nto unblock session-sharing Tasks 4-6 on the same branch.",
"is_bot": false,
"headline": "feat: codex agent support (discovery, MCP config, UI)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:03:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b7f5c48966723660f81c7c6beebd05134a03be8",
"body": "Adds a read-only reader that turns the shared pool and each isolated\nprofile's projects/ directory into ProjectSessions[] for the upcoming\nCLI (Task 4) and API (Task 5) session viewers. Parses .jsonl transcripts\nfor first prompt, message count, git branch, model, and real cwd, and\nskips profiles whose projects/ is a symlink into the shared pool.",
"is_bot": false,
"headline": "feat(core): scanSessions reader for pool + isolated profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "776123bcd473e6bcce78a23ce8bc7013f5ed0656",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): share/unshare session-dir apply actions",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:42:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "524c86726748b89ac953961388a679360209b841",
"body": null,
"is_bot": false,
"headline": "test(core): backfill sharedSessions in fixture literals",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:39:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fc0344707f588730bd40e77c071cfe637927a96",
"body": null,
"is_bot": false,
"headline": "feat(core): add sharedSessions flag to profile schema",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:34:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29613bf6b6b34e13d630f0c7b0401fe2d8396602",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: session-sharing implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:29:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "01baec9086407499cff1b622b49e18b6ebc45953",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: session-sharing across profiles design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:14:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "01d496b6a13f9be626c9bfad3841003b47b9fb67",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync packages/cli/README.md (prepack output)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:36:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1555b8b1bbcf90640ab24e0047f4ebeb664d0c36",
"body": "…le skip-permissions launcher toggle\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.4.0, claude-account-sync 0.6.0 — per-profi…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:36:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0adfee227682e84a7a16b96402a7080df2dfe7a3",
"body": "…); document toggle in README\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: force skipPermissions off for launcherless profiles (server-side…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:35:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "46b54818cd1c15d18b9d405084422987bad71740",
"body": "…-permissions toggle\n\nAdd skipPermissions: false to pre-existing ProfileDecl/Manifest test\nfixtures for schema consistency, and stop ProfileEditor from PATCHing\na stale skipPermissions:true after the launcher is cleared.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: fixture consistency + guard stale skipPermissions; e2e for skip…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:29:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cb16fd2b48fb987da1c66d5dd41c7449b8224c45",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): skip-permissions checkbox (launcher-gated) + table badge",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:23:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "50eb771113c08e1e6e49dc583cf140cd9bc9695d",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui-api): expose and accept skipPermissions on profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:20:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae52e232cfda485a1ec3bf5a699927cdfdd4e007",
"body": "…rmissions in launcher\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): per-profile skipPermissions renders --dangerously-skip-pe…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:15:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2b1e9ef26e1776088c3097170db571551c1bff41",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: plan for skip-permissions launcher toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:13:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "456b041d35024bfb81801c87fff0eab879931398",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: spec for per-profile skip-permissions launcher toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:11:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f01478e932fc82326af17d76f7613c95692c8e4a",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync packages/cli/README.md (prepack output)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:02:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8e622665d82f8268ce7e958e624921a1ad10f5a9",
"body": "….5.3\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — clarify clp manages user-scope MCP only; release cli 0…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:01:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17d9d7719f3554e74049b1e646607618bb7a5876",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync packages/cli/README.md (prepack output)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T08:50:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d447502bffad0d50a34d2efcd7f6df63480a87fa",
"body": "…sphrase); release cli 0.5.2\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — per-OS secrets setup (libsecret install + headless pas…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T08:49:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c496144eca137d424b5e5c85a1faa6189aaca057",
"body": "…copy on publish\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: claude-account-sync 0.5.1 — sync npm README with root; auto-…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T04:01:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49c12e60b1728bac0b46a88fe19174ce94f79d65",
"body": "…ution policy, OneDrive)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — using launchers on Windows (PowerShell 7 profile, exec…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T03:59:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5430a4d41482c6d10ce6bc02897759e1b5cf419",
"body": "…upport (remote MCP + DPAPI secrets); drop Related projects from README\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.3.0, claude-account-sync 0.5.0 — Windows s…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-05T21:34:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "25ef1e74906b225bc6f6aa2043db187467fec130",
"body": "…ws; gate test-os seam\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core): gitignore DPAPI secrets file; handle empty secret on Windo…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-05T21:28:59Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 15,
"commits_last_year": 159,
"latest_release_at": "2026-07-17T07:54:15Z",
"latest_release_tag": "v0.12.0",
"releases_from_tags": true,
"days_since_last_push": 5,
"active_weeks_last_year": 3,
"days_since_latest_release": 8,
"mean_days_between_releases": 1.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 28,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "claude-account-sync",
"exists": true,
"license": "MIT",
"keywords": [
"claude-code",
"claude",
"profiles",
"accounts",
"mcp",
"cli",
"sync",
"multi-account",
"keychain"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/claude-account-sync",
"is_deprecated": false,
"latest_version": "0.12.1",
"repository_url": "https://github.com/tmfadhlul/claude-code-profile",
"versions_count": 23,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3474,
"first_published_at": "2026-07-04T23:18:20.282000Z",
"latest_published_at": "2026-07-19T19:36:55.134000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "ccprofiles-core",
"exists": true,
"license": "MIT",
"keywords": [
"claude-code",
"claude",
"profiles",
"mcp",
"config-management"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/ccprofiles-core",
"is_deprecated": false,
"latest_version": "0.8.1",
"repository_url": "https://github.com/tmfadhlul/claude-code-profile",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2179,
"first_published_at": "2026-07-04T23:03:53.159000Z",
"latest_published_at": "2026-07-19T19:36:31.471000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 2,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-19",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/ui/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 29091,
"source_files_sampled": 115,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 5,
"malicious_count": 0,
"assessed_package": "npm:claude-account-sync@0.12.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "ccprofiles-core",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.8.1"
},
{
"name": "commander",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^12.1.0"
},
{
"name": "smol-toml",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.0"
},
{
"name": "yaml",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.5.0"
},
{
"name": "zod",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.0"
},
{
"name": "@fontsource-variable/manrope",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.8"
},
{
"name": "@fontsource-variable/newsreader",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.10"
},
{
"name": "@radix-ui/react-dialog",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "@radix-ui/react-label",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.0"
},
{
"name": "@radix-ui/react-slot",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.0"
},
{
"name": "@radix-ui/react-switch",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.0"
},
{
"name": "class-variance-authority",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.0"
},
{
"name": "clsx",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "lucide-react",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^0.454.0"
},
{
"name": "react",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^18.3.1"
},
{
"name": "react-dom",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^18.3.1"
},
{
"name": "sonner",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.0"
},
{
"name": "tailwind-merge",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.5.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "tmfadhlul",
"commits": 159,
"avatar_url": "https://avatars.githubusercontent.com/u/37733393?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "24a7602ddd7d0f8046ee213707b158a83d30dfb0",
"ran_at": "2026-07-25T18:42:45Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T19:38:27Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/tmfadhlul/claude-code-profile",
"host": "github.com",
"name": "claude-code-profile",
"owner": "tmfadhlul"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"security": 45,
"vitality": 69,
"community": 35,
"governance": 36,
"engineering": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 159,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "159 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 159
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v0.12.0",
"releases_from_tags": true,
"days_since_latest_release": 8,
"mean_days_between_releases": 1.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 35,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 2,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"packages": [
"claude-account-sync",
"ccprofiles-core"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 5653
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "5,653 downloads/month across npm",
"points": 50,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 5653,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"followers": 15,
"owner_type": "User",
"is_verified": null,
"owner_login": "tmfadhlul",
"public_repos": 19,
"account_age_days": 3045
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of tmfadhlul",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "tmfadhlul"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "19 public repos, account ~8 yr old",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 19
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"claude-account-sync",
"ccprofiles-core"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "23 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 23
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:claude-account-sync@0.12.1 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:claude-account-sync@0.12.1",
"assessed": 5
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 5,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 5,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/ui/tsconfig.json"
],
"agent_commit_share": 0.6,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/ui/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/ui/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "60 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 60,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 29091,
"source_files_sampled": 115,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/115 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 115,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:42:49.532820Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tmfadhlul/claude-code-profile.svg",
"full_name": "tmfadhlul/claude-code-profile",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit tmfadhlul/claude-code-profile teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
