ymmv-fyi / ymmv

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 1 direkte und 506 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

Die Installation von npm:ymmv-cli@0.9.0 zieht 1 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [
        "astro",
        "cli",
        "cloudflare-workers",
        "command-line-tool",
        "developer-profile",
        "developer-tools",
        "dotfiles",
        "terminal"
      ],
      "is_fork": false,
      "size_kb": 1989,
      "has_wiki": false,
      "homepage": "https://ymmv.fyi",
      "languages": {
        "CSS": 32964,
        "Astro": 37916,
        "Shell": 9415,
        "JavaScript": 4049,
        "TypeScript": 654199
      },
      "pushed_at": "2026-07-25T07:12:37Z",
      "created_at": "2026-06-30T00:47:14Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T04:46:31Z",
      "description": "The tools you actually use. Publish from the CLI, diff against anyone's.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://ymmv.fyi",
      "name": "ymmv.fyi",
      "type": "Organization",
      "login": "ymmv-fyi",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/297593369?v=4",
      "created_at": "2026-06-28T09:12:09Z",
      "is_verified": null,
      "public_repos": 1,
      "account_age_days": 32
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-07-22T04:52:08Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-07-19T20:55:38Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-07-12T02:49:31Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-07-10T03:34:32Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-07-04T09:35:31Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-04T09:35:30Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-04T09:35:28Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-04T09:35:26Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-04T09:35:24Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-04T09:35:22Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-07-04T09:35:20Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-07-04T09:35:18Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2026-07-04T09:35:16Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-07-04T09:35:14Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-07-04T09:35:13Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-04T09:35:11Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "ac930a52fb1a1d2c5358cdae046628b7a9ed014d",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cut 0.9.0",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:46:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7e1622b900462ae1208a37488394cbc4a224a36a",
          "body": "The check's first await is a real fs read that fake timers cannot\nadvance; on a slow runner the fake 500ms grace fired before the fetch\nwas ever invoked, leaving the captured signal undefined (CI verify(22)\nat bb823c0). Gate the timer advance on the fetch actually starting.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): deflake the update-check grace/abort test",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:43:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bb823c04dd9af6760d5ca83139441501d0499c73",
          "body": "`ymmv update` bullet names the npm/pnpm/bun global upgrades and the\nmanual fallback instead of promising the right package manager for any\ninstall. The @latest note stops claiming it beats npx's tag cache\n(update-check.ts pins exact versions precisely because it can't).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cli): scope update claims to what ships",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:40:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8a4e040399980f85437c0a06a9b383bd99aefff2",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: changelog for the update check and ymmv update",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:40:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "adbe30bd1aabf132fb047fef659f0edcd402f82a",
          "body": "Bare `npx ymmv-cli` can keep serving an old cached copy indefinitely, so\nevery copyable invocation (READMEs, landing hero/footer, profile foot and\ncopy button, 404 description, CI recipe) now carries @latest. READMEs\ndocument ymmv update and the update-check opt-outs. e2e clipboard pins\nupdated to match.",
          "is_bot": false,
          "headline": "docs+web: install invocations pin npx ymmv-cli@latest",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:40:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1efc60c5336f4230a031e269b76736c69d9119a",
          "body": "Passive npm-registry check runs concurrently with eligible commands and\nprints a one-line stderr notice (TTY only) when a newer release exists,\nlinking the releases page. Cache in the config dir throttles checks\n(24h success / 6h failure backoff); every failure is silent and the\nfinish grace caps ad\n[…]\ngated\nstderr latest hint; piped stdout stays byte-identical.\n\nOpt-outs: YMMV_NO_UPDATE_CHECK, NO_UPDATE_NOTIFIER, CI. Dev builds\n(0.0.0) never check. update is exempt from the config gate like logout.",
          "is_bot": false,
          "headline": "feat(cli): update notice + ymmv update command",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:40:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "633a7a5f74d2142ae68e9dd18469ec2aaf8f2443",
          "body": "The new CLI self-update verb joins CLI_VERBS so `ymmv update` can never\ncollide with a real profile. Prod D1 pre-checked clean for an existing\nclaim (users.handle_lower + handle_history.old_handle_lower); re-check\nrides the release tag while the claim window is open.",
          "is_bot": false,
          "headline": "feat(shared): reserve `update` as a non-claimable handle",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-22T04:40:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d04d89e79bbd1d65b7bcdb681b5e4124de62245d",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cut 0.8.0",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T20:52:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cd36ef88c7dd6440e460cb64376b75dadde2f0f1",
          "body": "Under parallel suite load WSL's bash can fail to launch or exit nonzero\nwithout running the parse; the syntax tripwire now skips (loudly) unless\nbash actually reports a syntax error. Linux CI keeps the strict path.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): waf tripwire tolerates a flaky local bash launch",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T20:49:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "70f97d3024be139a5de5af282152359bb2c9f7f5",
          "body": "infra/waf-ratelimit.sh, pointed at by rate-limit.ts and wrangler.jsonc\nsince the rule shipped, now exists: verify prints the live zone rule and\ndiffs it against the file's constants (verified against production);\napply converges idempotently and only ever PUTs the phase entrypoint\nwhen a 404 proves \n[…]\nted, and a help.test.ts tripwire pins the script's\nexistence, its expression atoms, env-only credentials, bash syntax, and\nboth source pointers.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(infra): commit the WAF rate-limit provisioning script",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T20:49:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0ae6d7e7d288337f9b2dc92014f030b24e65afc3",
          "body": "loadCredential prefers a YMMV_TOKEN env credential (handle from\nYMMV_HANDLE) over the stored login; the file readers stay env-blind so\nlogin's revoke flow and logout never touch it. credentialEnvProblem\nvalidates both vars at startup (logout exempt) without ever echoing the\ntoken. A 401/409 under an\n[…]\nd, closing the confirm-to-send account-switch window.\nREADME documents the CI recipe, the runner-detection caveat, and the\ntoken file locations.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): YMMV_TOKEN authenticates without a browser",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T20:49:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8fc9f96355ecdcb421b36e64ad7067c06f70d0f0",
          "body": "Dev/ymmv-dev shared prod's namespace ids (1001/2001), so a bare remote\ndeploy would consume production's live rate-limit counters; dev now uses\n1000/2000 (staging already isolates as 1002/2002) and the CAVEAT comment\nnames the hazard. RETRY_AFTER is exported and a new wrangler-config test\npins every\n[…]\ninding's period to it, the expected limit, and pairwise\nnamespace distinctness, parsed with jsonc-parser so comment style can't\nbreak the suite.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): dev wrangler config gets its own rate-limit namespace ids",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T20:49:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "29309dab274695aacbc3ff1b9c876c24641df8f4",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: changelog entries for the CLI hardening; atomic token rotate TODO",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3b2b910e256323ed2a34816930778df0b9c87138",
          "body": "DETECTED_KEYS exported from detect.ts anchors two new tripwires: a\nconvention test pins detectStack's output to the constant, and the\nREADME Auto-detected list is checked per key. The help tripwire now\nparses the Curated keys block and asserts exact set equality with\nCURATED_KEYS instead of whole-source substring matches.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(cli): README lists all ten detected fields, tripwired to the code",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "24c8934e1e7b633a3bc9c0467698b66a3a4ff7dc",
          "body": "…blished\n\nA transient failure loading the viewer's profile prints a faint stderr\nnote instead of the publish nudge; stdout stays card-only for pipes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): view distinguishes a failed own-profile fetch from never-pu…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e1e9716a2c788160f6a61c8f9e8e2835e6f87dfb",
          "body": "…y cards\n\nuseColor treats \"false\" like \"0\" (supports-color convention). renderProfile\nsections each push their own leading blank, so a zero-curated-entry profile\nno longer renders a double blank line; populated output is byte-identical.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): FORCE_COLOR=false disables color; single blank line on empt…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "626b95470cc3439d740e201c49b70199195d7b42",
          "body": "login peeks the stored credential, warns (prose, stderr) before\nreplacing a different base's token, and after a successful save\nrevokes the same-base token the file held at overwrite time. A failed\nrevoke never blocks the login. The device-code shape check bounds\ninterval (1..900s, finite) and expir\n[…]\nay) so a\nmangled 200 can neither hot-poll GitHub nor hold the login forever;\npollForToken self-defends and slow_down ignores unusable intervals.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): re-login revokes the replaced token; device-flow wire bounds",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "17101f9ee41d349897820bfa903d42409d10c20a",
          "body": "normalizeBase feeds both BASE and the new baseProblem check, so the\nvalidator and the request base cannot drift; the value must equal its\nown parsed origin, killing every parser-normalization bypass. Invalid\nvalues fail fast naming the variable instead of surfacing as a fake\nconnectivity error. Empt\n[…]\n. logout is exempt so tokens\nstored under legacy bases stay revocable. The logout other-base echo\nis sanitized like every other untrusted print.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): YMMV_API is validated at startup",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8be792c7d14a43bcbc4bf1994b390778a614c464",
          "body": "loadToken rejects a null root, a missing or non-string handle, and an\nempty token instead of crashing or misdiagnosing a reserved username.\nNew lenient peekCredential (base + token, any base) backs the login\nrevoke path; all three readers share one raw-read core.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): token store survives corrupt token.json",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T17:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2579c0d0b366d1005abfd3590c56ce4298178cca",
          "body": "The reference block named the JSON API but gave readers no path to the\ncontract; the data-row note now links docs/api.md (GitHub blob URL, same\nconvention as the cli README pointer). Footer e2e pins the anchor. Closes\nthe TODOS entry it implements.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(web): footer json note links the API contract doc",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T16:13:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57f80a52ce3b448ebbeee2df2a6ba3fc6a85d439",
          "body": "…ys tripwire\n\n- docs/api.md: shape, status matrix, caching directives, CORS, stability\n  promise; examples verified against the seeded local worker\n- both READMEs link the contract next to their existing API mention\n- the CLI convention suite now asserts every curated key appears in the doc\n- TODOS: capture linking the doc from the site footer as a future ride-along\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: public API contract in docs/api.md, README pointers, curated-ke…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T15:58:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6f02e0e138f9d8a1a8a74f05e7352d669a2348c5",
          "body": "…429 contract\n\n- the three Worker message strings (write 429, login 429, GitHub 503) use the\n  sentence-break style the CLI fallbacks already use\n- rate-limit.ts no longer claims the CLI keys on the rate_limited slug; the\n  contract is the 429 status, the optional {message}, and retry-after\n- web tests require a non-empty message with no em dash; CLI test fixtures\n  stubbing these responses updated to the new wire copy\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): server error copy drops em dashes; comment states the real …",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T15:58:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5a783de71c56937c60bce0e6ce22eeae35f26385",
          "body": "- read API 404/500 return {\"error\":\"not_found\"|\"internal_error\"} as\n  application/json; the 500 gains cache-control: no-store\n- access-control-allow-origin: * on every read response; OPTIONS preflight\n  handler (GET/HEAD grant, authorization named alongside the wildcard)\n- live profile read folds ow\n[…]\nies\n- tests pin the envelopes, headers, exact cache-control values, and a\n  one-statement read; e2e covers the served worker end of the contract\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(web): JSON errors, CORS + preflight, atomic read on the public API",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T15:58:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8778850a436d66eb515cd1266ec64ddc96b6b99",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cap limits in README, changelog entries, TODOS updates",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9f543b4d862004fa12dd7e854b63fca5706e26f8",
          "body": "Over-cap answers re-prompt in place, detected over-cap values refuse\nbefore the network on -y, a 33rd extra is refused locally, and a failed\nPOST returns to the confirm step instead of discarding the session.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): interactive publish keeps answers through transient failures",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "50c6cf107db2048c937b3003dba699e262ed6962",
          "body": "Server {message} bodies surface instead of raw dumps, mint slugs map to\nhuman copy, logout distinguishes unreachable from refused, the mid-publish\nre-login explains itself, and deterministic failures become PublishRefusal.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): honest error copy across publish, delete, login, and logout",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6d196f68fc9e374929effefe34494f816a47ed25",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): local cap pre-flight for set values and extra labels",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1976dc760874ee6298b63a657ce639d93de60d0a",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): wire-error parsing helpers and a typed NetworkError",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1edd878fd11e77be82603b0184c4411b4278ff22",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(api): human message on every write rejection",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f702f168afbc1543a55c079255d631566c862259",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(shared): export write caps, upgrade copy on schema mismatch",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T08:16:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "496aa65c98ef1505abf3a5505d0daaa252815ce8",
          "body": "The set/unset invalid-key error and the unknown-option error also echo raw\nargv; both now strip escapes like the handle branches, and the escape test\nwalks all five rejection paths. The flag-first -y error echoes the user's\nown verb (delete/publish) or a non-destructive publish example instead of\noffering delete to everyone. reserved.ts notes the old-binary skew caveat\nwhen reserving command words.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): sanitize every argv echo path, tailor the -y ordering hint",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T05:36:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "34f0dfdd60bddd5ec37d255c67543f4927dff555",
          "body": "Invalid-handle errors strip ANSI/OSC bytes before echoing argv (both view\nand bare paths). VIEW_USAGE hoisted beside the other usage consts. Tests\ncover the documented set -e shorthand, version-flag trailing rejection,\nand the escape-stripping. Root README commands list matches the CLI's;\nCHANGELOG wording narrowed (set/unset still join multi-word values).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): sanitize argv echoes, dedupe view usage, review test gaps",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T05:36:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "95ea15cfcdd7c095e5eefb433387c5c313b67972",
          "body": "Reject unexpected trailing arguments per verb: flag-first `ymmv -y delete`\nerrors instead of publishing, `ymmv delete <handle> -y` errors instead of\ndeleting the caller's own profile, and login/logout/view/bare-handle forms\ndrop nothing silently (help stays permissive by design). `version` and\n`publ\n[…]\nhared;\nthe web write path enforces it). Capitalized verbs hint the lowercase\ncommand. Help and README document `delete -y`, `-e`, and `version`.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): strict argv guards, version/publish verbs, verb case hints",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-19T05:36:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bed196dfe0867e184efb0bfdb428fa89ce6d3077",
          "body": "Bumps the github-actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).\n\n\nUpdates `actions/setup-node` from 6.4.0 to 7.0.0\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6a\n[…]\n\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node in the github-actions group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-18T20:21:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fc0aa876cdb84988e9fa60214b80bab52d8500d6",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cut 0.7.0",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:46:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9d99190c0c78b3ead982b4f4a0b87ae4110d7179",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: move completed web todos",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:34:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "85bfa20c8c4b36a8ef43806cb50efe3e22329321",
          "body": "Theme state (data-theme, aria-pressed, theme-color meta) now re-applies on\nBFCache restore (pageshow persisted) and cross-tab changes (storage,\nincluding the null-key localStorage.clear() form), with a single\nstoredTheme()/applyTheme()/setTheme() source for the whitelist and\nfallback chain.\n\nThe ins\n[…]\nrejected clipboard write announces \"Copy failed\" in the\nlive region instead of failing silently. Dead native-button resets\ndropped from the css.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(web): theme resync across tabs/BFCache, accessible install command",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:34:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ec13a4a856d175d1121f0ac835ba5499c9ec1c9",
          "body": "POST /api/v1/profile rejected trim-empty entry values but stored accepted\nones raw, so curl could persist padded values the page rendered padded.\nValues are now trimmed, then visibility-checked, then stored trimmed,\nmirroring the extras guard. The shared invisible-char check moves from a\nhand-rolled\n[…]\nselectors\npassed the old list and stored visually blank rows) — this tightens\nextras identically. The length cap now measures the trimmed value.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(api): trim entry values at the write boundary",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:34:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b9b746b49c5b070281bb18506c3d71cfc63993b9",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: logout keeps its own copy on revoke timeout, correct TODOS claim",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:26:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "880364cc9aed0b09c2b22940d2fd99898a099788",
          "body": "CHANGELOG [Unreleased] gains the three CLI entries for the next tagged\nrelease. The three shipped TODOS move to Completed. profile-ops.ts's\nextras-upsert comment stops claiming the server stores labels verbatim\n(it trims at the write boundary since the extras fix).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: stage changelog, move completed todos, fix stale comment",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:26:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3b19d17c2f480137e12482196fb9a1a5558aea87",
          "body": "ymmv 404 (and ymmv view api) used to make a network round-trip and\nmisreport \"no profile yet\" for names that can never have a profile. Both\nview paths now reject reserved names locally with a clear error; shape is\nchecked before reservation and the API stays the trust boundary. The baked\nlist means \n[…]\nhipped CLIs, now\ndocumented at both sites. Help copy drops the verb-collision rationale\n(all verbs are reserved, so such profiles cannot exist).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): reserved names fail fast locally",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:26:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "46d1761a3499e2a2eaaf9a67217e4f7f6c9a090f",
          "body": "Since the bound-handle guard, the dominant second-409 body is\nhandle_not_bound with actionable copy the CLI used to discard in favor of\na hardcoded handle-taken line that is wrong for that case. Prefer the\nserver's message via serverMessage (sanitized, 200-char capped); the\nhardcoded line stays as the fallback for non-JSON or message-less bodies.\nrateLimitMessage collapses to one line on the shared helpers.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): second publish-409 surfaces the server's message",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:26:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ebae5836839a79c20a2b5abd44b7ff1f7c0e0bc1",
          "body": "safeFetch defaults init.signal to AbortSignal.timeout(30_000) (explicit\nsignals win), the logout revoke rides safeFetch instead of bare fetch, and\nthe device-flow poll carries its own per-request signal feeding the\ntransient counter. Timeouts print one line, \"request timed out\", on every\nsurface: ca\n[…]\ne wire bytes to the\nterminal. New shared helpers serverMessage/withRetryHint/displayError/\nisTimeoutError DRY the four wire-message parse sites.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): every request times out after 30s with truthful error copy",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-12T02:26:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb45394b4d9cd49e4a9006553b83eb7f99db36d4",
          "body": "Bumps the github-actions group with 1 update: [actions/cache](https://github.com/actions/cache).\n\n\nUpdates `actions/cache` from 4.3.0 to 6.1.0\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github\n[…]\n\n  dependency-version: 6.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/cache in the github-actions group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T11:36:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d88b01c7b97c64dba9ba59011edf984ced718d54",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: coverage for publish 500 path and same-handle re-login history",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T05:54:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8ba82d435de7dc963062ec085898a1eadd824179",
          "body": "The CLI branches on publish-409 status alone, so behavior is unchanged;\nfixtures now model the server's dominant 409 body. TODOS gains a P4 to\nsurface the server's 409 message in a future CLI release.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: align CLI 409 fixtures with handle_not_bound, queue CLI copy TODO",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T05:54:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "479c1060a82656b3172947c2d7e642f58bd8dd34",
          "body": "POST /api/v1/profile no longer binds handles. The bound-handle guard\nrefuses any payload handle that is not the caller's current\nusers.handle_lower (409 handle_not_bound; deployed CLIs already\nself-heal on 409 via re-login), and the write batch re-checks the bind\nin every statement (CAS) so a publis\n[…]\nments is\nnow login-only; the UNIQUE-violation backstop is gone with publish's\nlast handle write. Response echoes the stored login-proven casing.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): publish only writes under the login-bound handle",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T05:54:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "33238ae5ab91cd68620bcda494ceb32b35a37a4d",
          "body": "Mutable action tags (checkout@v7, setup-node@v6, pnpm/action-setup@v6,\ncache@v4) are now 40-char commit SHAs with version comments, in both\nworkflows: release.yml holds npm Trusted Publishing OIDC + the Cloudflare\nAPI token, and ci.yml shares the Astro-fonts cache key with the release\njobs, so an un\n[…]\n now documents the retry path: gh run rerun --failed, and check\nnpm view before rerunning a failed publish job (npm publish is not\nidempotent).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: SHA-pin actions, add job timeouts and dependabot",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T04:21:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d23d12d16b1e2a2bb961bcbda60c2c2f9393cb2f",
          "body": "npm 12.0.0 broke provenance publishing (npm/cli#9722): npm publish dies with\nCannot find module 'sigstore' from libnpmpublish/lib/provenance.js. The publish\nstep tracked npm@latest, so the v0.6.2 tag deployed the Worker and then failed at\nnpm publish. Node 22 ships npm 10.x and Trusted Publishing needs >= 11.5.1, so the\nupgrade step stays, pinned to the 11 major.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: pin release npm to 11.x",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T03:31:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b56c7f565eb5c3e7cf20142b3124a5226224fbf7",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cut 0.6.2",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T03:17:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4027ff5331583ee53b205e1e6a55516798eb6614",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: record the reserved handle and extras validation",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T03:17:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c6dadcd2c4692c1da23c9d4c4998d25c6aa9fea3",
          "body": "The write API checked extras only for type and length, so an empty or\nwhitespace-only label or value was storable and rendered as a blank row that the\nCLI could never unset. Entries already rejected blank values; extras now match.\n\nTrim before the checks and store the trimmed string, so padding is n\n[…]\n Reject a field when nothing visible survives, while\nstoring the user's bytes untouched when an invisible character merely decorates\nreal text.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): reject extras with no visible content",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T03:17:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "22c28330e772225485d3f4f32cc6a94e03afe7ec",
          "body": "The site serves a static page at /404, and Astro resolves a static route ahead of\nthe dynamic [handle] page. So the handle \"404\" (a valid GitHub login) could be\npublished and served as JSON at /api/v1/u/404 while /404 rendered the not-found\npage: the HTML and JSON surfaces disagreed permanently.\n\nRe\n[…]\nn the gap. Two docstrings\nclaimed the reserved set was only api/login/logout; that stale comment is how the gap\ngot in, and both are corrected.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(shared): reserve the 404 handle",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T03:17:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1a760b1fd13098c2835b3737eda90bdc58de3b11",
          "body": "parseProfile capped entry.value and both extras fields but left entry.key,\nhandle, and updated_at with only a type check. All three reach sanitizeValue on\na CLI print path, so a hostile origin could feed a multi-megabyte string that the\nterminal sanitizer then scans. Cap them at the same read-side c\n[…]\nrous and decoupled from the write caps on purpose: a future\nwrite-cap increase must never make the CLI reject a legitimate first-party profile.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(shared): bound every profile string the sanitizer scans",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-10T03:17:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "30d91f44cbb44bb22d34d513626c0899eb9ba52f",
          "body": "Scoped pnpm overrides bump transitive dev deps out of their vulnerable\nranges: yaml stack overflow (GHSA-48c2-rrv3-qjmp) via yaml-language-server,\nesbuild dev-server file read (GHSA-g7r4-m6w7-qqqr) via tsup. Both dedupe to\na single patched copy.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deps): pin yaml and esbuild past vuln ranges",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-08T00:45:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "986324eb786789455297cda0edffec2d56e22e15",
          "body": null,
          "is_bot": false,
          "headline": "fix(web): extend page grain to full document height",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-08T00:25:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7982d449c1dedef3bb0d0d68b2346faab75610ba",
          "body": "New design system documented in DESIGN.md.\n\n- brand: different font stack, fork-mark favicon/og image, og:image meta\n- landing: animated canvas hero, how-it-works section\n- profile: 'updated' stamp, SVG go arrow\n- diff: fork-mark heading, ratio-bar minimap of differing rows\n- e2e: font preload and token pins updated",
          "is_bot": false,
          "headline": "feat(web): redesign around new design system",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-07T23:29:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "422c9547405bf9573ce4b1176cfeb3dd6169259d",
          "body": null,
          "is_bot": false,
          "headline": "docs: match README tagline to site, add npm + CI badges",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-06T07:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b4620d8549492a68218c33aa9af2690dacede37",
          "body": null,
          "is_bot": false,
          "headline": "ci: cut a GitHub release from the CHANGELOG on each tag",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-06T07:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46992f2f35cfbcc83afccec1524ffe146da74d23",
          "body": "CHANGELOG stages the tag-driven ymmv-cli train; the Worker deploys by hand, so\na pure web change is live on ship and gets no [Unreleased] entry. Log a Worker\nchange only when it rides with a CLI change in the same tag.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: scope the CHANGELOG to CLI releases",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T21:01:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "813236c487d4cd5b37c23a9d694f70b1d9cbb825",
          "body": "Landing showed an example profile but not a diff, so the product's core verb\nwas invisible until you'd installed the CLI and published. Adds an\noctocat-vs-hubot example after the profile sample, teaches Diff.astro an\n`example` mode (plain-text handles, no swap, no extras) mirroring\nProfile.astro, an\n[…]\nn the live profile/diff pages tightened. e2e covers the 7/6 counts, the\nmissing-value row, amber-on-changed, single h1, and extras suppression.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(web): show an example diff on the landing page",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T21:01:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c892623908cfb03ebd85105ea6be61afd88b15ab",
          "body": "Cache node_modules/.astro/fonts keyed on the fonts config in the four\nbuild jobs (ci: verify + e2e; release: gate + deploy-worker), so builds\nstop re-fetching and a provider outage can't fail a cached build.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: cache Astro font downloads across builds",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T11:55:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0d130ee6c20fa222d78fc8e1c823754d4badedcc",
          "body": "Guards the migration: exactly 3 preload font links (a degraded build\ndrops one), /_astro/fonts/* serves 200, and --font-display/-sans/-mono\ncarry the real families.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(web): assert font preloads and self-hosting in e2e",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T11:55:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8692eddc000de1f19d4d1d86bf70ab7fe831b91b",
          "body": "Hand-written @font-face + manual preloads replaced by the stable fonts:\nconfig and the <Font> component. Fonts fetch at build (Fontshare +\nGoogle), self-host under hashed /_astro/fonts/* with immutable caching,\nand gain size-matched fallback metrics to cut CLS. General Sans stays 3\nstatics (no varia\n[…]\nder); Geist Mono is one sliced\nvariable file. Vendored woff2 removed; LICENSES.md kept for attribution\nsince the build redistributes the fonts.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(web): serve self-hosted fonts via Astro's Fonts API",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T11:55:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2d96dd4e84ef89d7aa3ad54995d982901f0cd5c4",
          "body": null,
          "is_bot": false,
          "headline": "feat(web): rework hero tagline copy",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T10:02:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b416d1fe1c2c7248a7c8cd6b9d500f026c6ed7a6",
          "body": null,
          "is_bot": false,
          "headline": "docs: add manual web deploy runbook",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T07:53:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b24261e50f56b6e46a96ee3af1047b8274790af9",
          "body": null,
          "is_bot": false,
          "headline": "docs: drop skill-routing section",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T07:53:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff6a692862d9e36dc89c31e6bed3394ca615d11a",
          "body": null,
          "is_bot": false,
          "headline": "fix(web): add title to favicon svg for biome a11y lint",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T07:20:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc026dbed7564a7e7deeb7bd577f29dc9a20c0dd",
          "body": null,
          "is_bot": false,
          "headline": "feat(web): add site favicon",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T07:20:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b59f5cd31cba5ef4451cc7a6942ae89b4323303",
          "body": null,
          "is_bot": false,
          "headline": "docs: trim README description",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T07:20:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fabd8e8df98eac5612c02d397e5ff4e1ecacafd9",
          "body": null,
          "is_bot": false,
          "headline": "docs: add diff example to demo.gif",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:50:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "223115e47a29c595395caf9ba482280bd92bdae0",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cut 0.6.1",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "22feabcd5243288d42fe43ed51a12f31d9fbacdb",
          "body": "RL_AUTH rides with RL_WRITE in the manual-steps list; safeFetch is not the\nsingle fetch choke point (logout revoke is raw fetch); the stdout-clean\nclaim scoped to the blank line; tape comments match the 0.6.0 publish flow.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: correct stale claims in changelog, CLAUDE.md, TODOS.md, demo tape",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e7e3dcef6081b827df4afbeceb477130262a42d",
          "body": "…tyle\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: strip stray indent from CLAUDE.md intro, match changelog bold s…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "50430d679d53e124057b5cfe4c2cc1dacbbd46f2",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: changelog for the output-spacing pass",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f5d0ce5be88d765f56a98037031860a0b75a38bc",
          "body": "An HTTP-date retry-after (the WAF/proxy form) garbled the rate-limit\nmessage; the raw header also skipped the sanitize-at-render rule.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): retry hint only for seconds-form retry-after",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5233a53e2ae799b41f25bbf753780e3646b1b23a",
          "body": "One convention (render.ts header): every unit opens with one blank line,\nindents two spaces, and never carries trailing blanks; cli.ts prints the\none closing blank line (stdout on success, stderr on failure so pipes\nstay clean). help and --version stay flush-left. Fixes the cramped\npublish confirmation and the double blank between a viewed card and the\nnudge. Convention pinned by exact-byte tests incl. spawned-bin checks.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): print every message as an indented output unit",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "df18f48a6ce8b6ec757cc8fbf1a5220777bf94ae",
          "body": ".claude/ and .audits/ are machine-local; CLAUDE.md and TODOS.md are repo docs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: ignore local tooling state, track project docs",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T04:14:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e875ff7881c7083dc5b3aa01c90201ee75cc6ce7",
          "body": null,
          "is_bot": false,
          "headline": "docs: update demo.gif",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:55:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "225653bf94eb8f9edbe342f3dc15ebf227d6fd9c",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: cut 0.6.0",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d9acd6c3b524365897e4733ce4bd1ec735409f56",
          "body": "Coverage audit gaps: renderProfile extras rows (incl. URL-extra\nlinkify), the second-409 handle-taken verdict, generic POST failure,\nand requestDeviceCode's non-ok status. 86% -> 92% of changed paths\nasserted; the rest are cosmetic smoke or manual-by-design.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: cover the remaining error-path branches",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3e218a5cf74991f38346b6ea1794222e07e3fbbe",
          "body": "A malformed error body ({\"message\": 123}) reached wireText through\ntruthiness-only callers and threw a TypeError inside the error path\nitself. Coerce with String() before sanitizing; the error path never\nthrows.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): wireText coerces non-string wire values",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "051bba7f2b8ead4e1f1c327a1155503bf6bf0d04",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: trim changelog to user-facing changes",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8ab485763efb74bc39958eafa4d0d8ed900abfd7",
          "body": "A reader of ymmv help is already holding the CLI, and the first usage\nline says what ymmv does. The CTA belongs on the web page, where it\nlives already.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): drop the publish-your-own footer from help",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2cf3bff13cf2b5445d2a719bd15b0245496bf72c",
          "body": "Respects-NO_COLOR is a convention, not news, and YMMV_API is a\ncontributor knob; neither earns a line every user reads. Both stay\ndocumented in the READMEs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): drop the env-var footer from help",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c1eaed54d9cec07dcad29c0b701b1d828ad110d6",
          "body": "Auth retries refuse ANY rebound identity (the 409 path now matches the\n401 guard; a re-run re-reads under the current handle, so a rename heal\nsurvives as two commands and a squat-seeded merge never publishes).\nCtrl+D at a prompt aborts cleanly instead of exiting 0 with a pending\nquestion unsettled;\n[…]\n Test env is hermetic\n(setup-env scrubs YMMV_API/FORCE_COLOR/NO_COLOR, pins TERM); new\nprompter, wireText, mint-shape, and Published-line tests.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): pre-landing review hardening",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dd3fdef734b82b7f2f7e056dab4fe4f30c56153d",
          "body": "…ators\n\nThe foot becomes a flex row: numbers in ink (the existing .foot b idiom)\nwith faint words, a 24px gap standing in for the CLI's three spaces, and\nswap → alone on the right edge as the one action. Interpuncts gone.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(web): redesign the diff foot — counts left, swap right, no separ…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "897cfac8b21e793fd852c62a5febd28b54b3b82b",
          "body": "\"N differ   M shared\" in the terminal; \"N differ · M shared · swap →\"\non the web (HTML collapses spaces, the interpunct carries the layout\nthere). The tagline is gone from both surfaces.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: diff footer is just the counts",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "699e1b557272c590ff433738c73bdad9f7167047",
          "body": "\"N differ · M shared: your mileage may vary\" everywhere the line renders\n(CLI diff, web diff foot, README samples), and the web extras heading\nreads \"Extras (not compared)\". The two surfaces stay identical.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: drop the em dash from the diff footer on both surfaces",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ef056ce87112402b8ebf7208a1d3c6db0e42ac21",
          "body": "A message that contains a sentence break now opens with a capital too:\n\"Can't reach ymmv.fyi. Check your connection (...)\", \"Session expired.\nRun ...\". Single fragments (publish failed: 500, rate limited, ...) stay\nlowercase.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): capitalize multi-sentence messages",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ed68e25442072dd82b659660263277704282a5af",
          "body": "Every prompt, error, and confirmation now uses plain punctuation\n(periods, semicolons, a colon in the help title). The diff footer keeps\nits web-matching typography, and the em dash survives as the\nmissing-value glyph. Test regexes and the plain-help snapshot follow.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): drop em dashes from runtime messages",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4c2f7c4afb769515f0c598bd16a947c052172cfc",
          "body": "Hint reads \"Enter to keep, \\\"-\\\" to clear\" (symmetric verbs, no\nseparator glyph). Abort lines drop the em dash: \"Aborted. Nothing\npublished.\" / \"Cancelled. Nothing deleted.\"\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): prompt-hint and abort copy",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5448314161fed0ee6a37ffe5c41c91cbb6e5c6ef",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: changelog for the CLI restyle",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4ad18952a7dfca8d89da797bb02b36d521813ed3",
          "body": "…t account\n\nA 401 mid-publish re-runs the device flow and retries. If a different\nGitHub account gets authorized in that browser tab, the retry would\npublish the first account's merged profile onto the second — a silent\ncross-account overwrite. The retry now refuses when the re-minted handle\ndiffers from the profile being published. The 409 path keeps its rebind:\nthere the handle itself is the dispute, and a changed handle is the heal.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): refuse the 401-retry publish when re-login binds a differen…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7ec78deb4fd4ee53e26e0b97e1bca6cb2d8acf67",
          "body": "help renders with faint section heads and a bold wordmark; plain output\nstays byte-identical (pinned by a snapshot test; the curated-key list\nremains literal in source for the sync tripwire). publishProfile returns\n{handle, url} instead of printing — commands compose their own output:\npublish prints\n[…]\n verification link, a bold sanitized code (was printed\nraw off the wire), a waiting-for-approval line, and — standalone only —\na next-step hint.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): styled help, linked messages, one-line set/unset",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d6fa591c79c01350111731dd384c22c6c7c7cb33",
          "body": "New http.ts safeFetch wraps every CLI fetch (api, login mint, device\nflow): any thrown network failure — undici TypeError, TLS, proxy — reads\nas \"can't reach <host> — check your connection (<cause>)\" instead of a\nraw fetch failed. A thrown fetch during the GitHub login poll now counts\nas a transient like a proxy 5xx (previously it crashed a login the user\nhad already approved), and the give-up message carries the last cause.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): actionable network errors; login poll survives blips",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8eca91de5cce649ec98963ef90cf754d218c665f",
          "body": "…ompts\n\nRepublishing shows the merged preview card immediately; one keypress\npublishes, n aborts, e opens the prefilled field walk (loop until\nconfirmed). First-ever publish keeps the guided prompts, now preceded by\na one-line hint making Enter-to-keep and \"-\"-to-clear discoverable.\nymmv -y on a TTY\n[…]\n); the delete confirm cancels\nthe same way. The carried-fields and duplicate-extra notes recompute\nwith every card so an edit pass updates them.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): card-first republish with [Y/n/e], -y publishes without pr…",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "35e159df60711957d8e0d143c82379dae6afa214",
          "body": "Prompt labels render faint (plain output byte-identical). New\nPrompter.choice() asks single-letter questions (first-letter match,\nre-ask on garbage, keys validated unique). Ctrl+C during any question\naborts it via AbortSignal — the nodejs/node#53497 workaround — and\nsurfaces as PromptAborted for the command to handle; between questions\nthe process exits 130 directly instead of readline swallowing the\nsignal and hanging.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): styled prompts, single-letter choice(), clean Ctrl+C",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fa3a23c0550ddad649ce190d6d8ee87f2545fb99",
          "body": "The profile card opens with the web breadcrumb (faint site/ + bold\nhandle), URL values render as links, and the updated line is humanized\n(3h ago; plain date past 30 days). A new preview mode — used only by the\npublish flow — lists unset curated keys as faint em-dash rows and drops\nthe not-yet-true \n[…]\nhiding empties. The diff\ngains the web's title line (how X differs from you) and uppercase column\nheaders. README diff samples updated to match.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): card + diff parity with the web",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "887e336159732ed518e3b7b7424cad7653dbec3b",
          "body": "link() renders URLs amber with an OSC-8 hyperlink and https://-stripped\ndisplay when color is on (full plain URL when off; no OSC-8 on TERM=linux/\ndumb, which mishandle unknown OSC). relTime() humanizes wire timestamps.\ncolorEnabled() moves into render.ts so every print site shares one gate.\nnotFound() links the site CTA. Amber now covers links + diff-differences,\nmatching the web's scarcity rule exactly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): render toolkit — links, relative time, shared color gate",
          "author_name": "bardisty",
          "author_login": "bardisty",
          "committed_at": "2026-07-03T01:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 16,
      "commits_last_year": 128,
      "latest_release_at": "2026-07-22T04:52:08Z",
      "latest_release_tag": "v0.9.0",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "ymmv-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "ymmv",
            "uses",
            "dotfiles",
            "developer-tools",
            "profile",
            "diff",
            "cli",
            "terminal"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/ymmv-cli",
          "is_deprecated": false,
          "latest_version": "0.9.0",
          "repository_url": "https://github.com/ymmv-fyi/ymmv",
          "versions_count": 16,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2783,
          "first_published_at": "2026-06-30T01:14:08.057000Z",
          "latest_published_at": "2026-07-22T04:51:59.736000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "packages/cli/tsconfig.json",
        "packages/shared/tsconfig.json",
        "packages/web/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 50191,
      "source_files_sampled": 84,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 3020
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 1,
        "malicious_count": 0,
        "assessed_package": "npm:ymmv-cli@0.9.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "env-paths",
          "manifest": "packages/cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3"
        },
        {
          "name": "@ymmv/shared",
          "manifest": "packages/web/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "env-paths",
            "direct": true,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/check",
            "direct": false,
            "version": "0.9.9",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/check",
            "direct": false,
            "version": "^0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/cloudflare",
            "direct": false,
            "version": "14.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/cloudflare",
            "direct": false,
            "version": "^14",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler",
            "direct": false,
            "version": "2.13.1",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-darwin-arm64",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-darwin-x64",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-linux-arm64-gnu",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-linux-arm64-musl",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-linux-x64-gnu",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-linux-x64-musl",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-wasm32-wasi",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-win32-arm64-msvc",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-binding-win32-x64-msvc",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/compiler-rs",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/internal-helpers",
            "direct": false,
            "version": "0.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/language-server",
            "direct": false,
            "version": "2.16.10",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/markdown-satteri",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/prism",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/telemetry",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/underscore-redirects",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@astrojs/yaml2ts",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/biome",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-darwin-arm64",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-darwin-x64",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-linux-arm64-gnu",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-linux-arm64-musl",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-linux-x64-gnu",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-linux-x64-musl",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-wasm32-wasi",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-win32-arm64-msvc",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@bruits/satteri-win32-x64-msvc",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "@capsizecss/unpack",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@clack/core",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "@clack/prompts",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/kv-asset-handler",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/unenv-preset",
            "direct": false,
            "version": "2.16.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/vite-plugin",
            "direct": false,
            "version": "1.42.3",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/vitest-pool-workers",
            "direct": false,
            "version": "0.16.20",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/vitest-pool-workers",
            "direct": false,
            "version": "^0.16",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-darwin-64",
            "direct": false,
            "version": "1.20260625.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-darwin-arm64",
            "direct": false,
            "version": "1.20260625.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-linux-64",
            "direct": false,
            "version": "1.20260625.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-linux-arm64",
            "direct": false,
            "version": "1.20260625.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-windows-64",
            "direct": false,
            "version": "1.20260625.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cspotcode/source-map-support",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/abbreviation",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/css-abbreviation",
            "direct": false,
            "version": "2.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/css-parser",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/html-matcher",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/scanner",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/stream-reader",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emmetio/stream-reader-utils",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@img/colour",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-darwin-arm64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-darwin-x64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-darwin-arm64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-darwin-x64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-arm",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-arm64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-ppc64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-riscv64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-s390x",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-x64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linuxmusl-arm64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linuxmusl-x64",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-arm",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-arm64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-ppc64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-riscv64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-s390x",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-x64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linuxmusl-arm64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linuxmusl-x64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-wasm32",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-arm64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-ia32",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-x64",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/gen-mapping",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@oslojs/encoding",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.137.0",
            "ecosystem": "npm"
          },
          {
            "name": "@playwright/test",
            "direct": false,
            "version": "1.61.1",
            "ecosystem": "npm"
          },
          {
            "name": "@playwright/test",
            "direct": false,
            "version": "^1.61.1",
            "ecosystem": "npm"
          },
          {
            "name": "@poppinss/colors",
            "direct": false,
            "version": "4.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@poppinss/dumper",
            "direct": false,
            "version": "0.6.5",
            "ecosystem": "npm"
          },
          {
            "name": "@poppinss/exception",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/pluginutils",
            "direct": false,
            "version": "5.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm-eabi",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-x64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-x64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-gnueabihf",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-musleabihf",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-s390x-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openbsd-x64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openharmony-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-arm64-msvc",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-ia32-msvc",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-msvc",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/core",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/engine-javascript",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/engine-oniguruma",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/langs",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/primitive",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/themes",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/types",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/vscode-textmate",
            "direct": false,
            "version": "10.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@sindresorhus/is",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@speed-highlight/core",
            "direct": false,
            "version": "1.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree-jsx",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/hast",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mdast",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/nlcst",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "22.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/unist",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@ungap/structured-clone",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@volar/kit",
            "direct": false,
            "version": "2.4.28",
            "ecosystem": "npm"
          },
          {
            "name": "@volar/language-core",
            "direct": false,
            "version": "2.4.28",
            "ecosystem": "npm"
          },
          {
            "name": "@volar/language-server",
            "direct": false,
            "version": "2.4.28",
            "ecosystem": "npm"
          },
          {
            "name": "@volar/language-service",
            "direct": false,
            "version": "2.4.28",
            "ecosystem": "npm"
          },
          {
            "name": "@volar/source-map",
            "direct": false,
            "version": "2.4.28",
            "ecosystem": "npm"
          },
          {
            "name": "@volar/typescript",
            "direct": false,
            "version": "2.4.28",
            "ecosystem": "npm"
          },
          {
            "name": "@vscode/emmet-helper",
            "direct": false,
            "version": "2.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vscode/l10n",
            "direct": false,
            "version": "0.0.18",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-draft-04",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "am-i-vibing",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "any-promise",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "anymatch",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "aria-query",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "astro",
            "direct": false,
            "version": "7.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "astro",
            "direct": false,
            "version": "^7",
            "ecosystem": "npm"
          },
          {
            "name": "axobject-query",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "bail",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "blake3-wasm",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "boolbase",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "bundle-require",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "cac",
            "direct": false,
            "version": "6.7.14",
            "ecosystem": "npm"
          },
          {
            "name": "ccount",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "character-entities-html4",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "character-entities-legacy",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "ci-info",
            "direct": false,
            "version": "4.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "cjs-module-lexer",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "clsx",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "comma-separated-tokens",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "11.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "common-ancestor-path",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "confbox",
            "direct": false,
            "version": "0.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "consola",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-es",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "crossws",
            "direct": false,
            "version": "0.3.5",
            "ecosystem": "npm"
          },
          {
            "name": "css-select",
            "direct": false,
            "version": "5.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "css-tree",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "css-tree",
            "direct": false,
            "version": "3.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "css-what",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "csso",
            "direct": false,
            "version": "5.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "defu",
            "direct": false,
            "version": "6.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "dequal",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "destr",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "devalue",
            "direct": false,
            "version": "5.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "devlop",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "diff",
            "direct": false,
            "version": "8.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "dom-serializer",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "domelementtype",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "domhandler",
            "direct": false,
            "version": "5.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "domutils",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "dset",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "emmet",
            "direct": false,
            "version": "2.4.11",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "entities",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "entities",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "error-stack-parser-es",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "eventemitter3",
            "direct": false,
            "version": "5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "extend",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-truncated-width",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-width",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-wrap-ansi",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fix-dts-default-cjs-exports",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "flattie",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "fontace",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "fontkitten",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "get-tsconfig",
            "direct": false,
            "version": "5.0.0-beta.4",
            "ecosystem": "npm"
          },
          {
            "name": "github-slugger",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "h3",
            "direct": false,
            "version": "1.15.11",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-from-html",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-from-parse5",
            "direct": false,
            "version": "8.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-parse-selector",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-to-html",
            "direct": false,
            "version": "9.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "hast-util-whitespace",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "hastscript",
            "direct": false,
            "version": "9.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "html-void-elements",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "http-cache-semantics",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "iron-webcrypto",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-docker",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-docker",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-inside-container",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-obj",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-wsl",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "joycon",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jsonc-parser",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonc-parser",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonc-parser",
            "direct": false,
            "version": "^3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "kleur",
            "direct": false,
            "version": "4.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lilconfig",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "lines-and-columns",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "load-tsconfig",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "mdast-util-to-hast",
            "direct": false,
            "version": "13.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "mdn-data",
            "direct": false,
            "version": "2.0.28",
            "ecosystem": "npm"
          },
          {
            "name": "mdn-data",
            "direct": false,
            "version": "2.27.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-character",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-encode",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-sanitize-uri",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-symbol",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromark-util-types",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "miniflare",
            "direct": false,
            "version": "4.20260625.0",
            "ecosystem": "npm"
          },
          {
            "name": "mlly",
            "direct": false,
            "version": "1.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "mrmime",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "muggle-string",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "mz",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "neotraverse",
            "direct": false,
            "version": "0.6.18",
            "ecosystem": "npm"
          },
          {
            "name": "nlcst-to-string",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-fetch-native",
            "direct": false,
            "version": "1.6.7",
            "ecosystem": "npm"
          },
          {
            "name": "node-mock-http",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "normalize-path",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nth-check",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "ofetch",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "ohash",
            "direct": false,
            "version": "2.0.11",
            "ecosystem": "npm"
          },
          {
            "name": "oniguruma-parser",
            "direct": false,
            "version": "0.12.2",
            "ecosystem": "npm"
          },
          {
            "name": "oniguruma-to-es",
            "direct": false,
            "version": "4.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "7.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-queue",
            "direct": false,
            "version": "9.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-timeout",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "package-manager-detector",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "parse5",
            "direct": false,
            "version": "7.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-browserify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "6.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "piccolore",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "pirates",
            "direct": false,
            "version": "4.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pkg-types",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "playwright",
            "direct": false,
            "version": "1.61.1",
            "ecosystem": "npm"
          },
          {
            "name": "playwright-core",
            "direct": false,
            "version": "1.61.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.15",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-load-config",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "3.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "prismjs",
            "direct": false,
            "version": "1.30.0",
            "ecosystem": "npm"
          },
          {
            "name": "process-ancestry",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "property-information",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "radix3",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "regex-recursion",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "regex-utilities",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "rehype",
            "direct": false,
            "version": "13.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rehype-parse",
            "direct": false,
            "version": "9.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "rehype-stringify",
            "direct": false,
            "version": "10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "request-light",
            "direct": false,
            "version": "0.5.8",
            "ecosystem": "npm"
          },
          {
            "name": "request-light",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-from",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-pkg-maps",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "retext-smartypants",
            "direct": false,
            "version": "6.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "rollup",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "satteri",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "sax",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "sharp",
            "direct": false,
            "version": "0.34.5",
            "ecosystem": "npm"
          },
          {
            "name": "shiki",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "sisteransi",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "smol-toml",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.7.6",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "space-separated-tokens",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "stringify-entities",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "sucrase",
            "direct": false,
            "version": "3.35.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "10.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "svgo",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "thenify",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "thenify-all",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "tiny-inflate",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyclip",
            "direct": false,
            "version": "0.1.15",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "tree-kill",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "trim-lines",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "trough",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ts-interface-checker",
            "direct": false,
            "version": "0.1.13",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsup",
            "direct": false,
            "version": "8.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "typesafe-path",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript-auto-import-cache",
            "direct": false,
            "version": "0.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "ufo",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "npm"
          },
          {
            "name": "ultrahtml",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "uncrypto",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici",
            "direct": false,
            "version": "7.28.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "unenv",
            "direct": false,
            "version": "2.0.0-rc.24",
            "ecosystem": "npm"
          },
          {
            "name": "unified",
            "direct": false,
            "version": "11.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "unifont",
            "direct": false,
            "version": "0.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-is",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-position",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-stringify-position",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-visit",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "unist-util-visit-parents",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "unstorage",
            "direct": false,
            "version": "1.17.5",
            "ecosystem": "npm"
          },
          {
            "name": "vfile",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "vfile-location",
            "direct": false,
            "version": "5.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "vfile-message",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "vitefu",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-css",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-emmet",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-html",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-prettier",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-typescript",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-typescript-twoslash-queries",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "volar-service-yaml",
            "direct": false,
            "version": "0.0.70",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-css-languageservice",
            "direct": false,
            "version": "6.3.10",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-html-languageservice",
            "direct": false,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-json-languageservice",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-jsonrpc",
            "direct": false,
            "version": "8.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-jsonrpc",
            "direct": false,
            "version": "9.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-languageserver",
            "direct": false,
            "version": "9.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-languageserver-protocol",
            "direct": false,
            "version": "3.17.5",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-languageserver-protocol",
            "direct": false,
            "version": "3.18.1",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-languageserver-textdocument",
            "direct": false,
            "version": "1.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-languageserver-types",
            "direct": false,
            "version": "3.17.5",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-languageserver-types",
            "direct": false,
            "version": "3.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-nls",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "vscode-uri",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "web-namespaces",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "which-pm-runs",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "workerd",
            "direct": false,
            "version": "1.20260625.1",
            "ecosystem": "npm"
          },
          {
            "name": "wrangler",
            "direct": false,
            "version": "4.105.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrangler",
            "direct": false,
            "version": "^4",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "xxhash-wasm",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml-language-server",
            "direct": false,
            "version": "1.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "17.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "22.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "youch",
            "direct": false,
            "version": "4.1.0-beta.10",
            "ecosystem": "npm"
          },
          {
            "name": "youch-core",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "3.25.76",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "zwitch",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 507,
        "direct_count": 1,
        "indirect_count": 506
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 40,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "bardisty",
          "commits": 126,
          "avatar_url": "https://avatars.githubusercontent.com/u/6248459?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/9 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 1,
            "reason": "9 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ac930a52fb1a1d2c5358cdae046628b7a9ed014d",
        "ran_at": "2026-07-31T02:19:13Z",
        "aggregate_score": 4.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T07:19:38Z",
      "oldest_open_prs": [
        {
          "number": 40,
          "created_at": "2026-07-21T07:52:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 42,
          "created_at": "2026-07-25T07:12:38Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-22T04:40:41Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ymmv-fyi/ymmv",
    "host": "github.com",
    "name": "ymmv",
    "owner": "ymmv-fyi"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 62 is calibrated to 69 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 62,
            "calibrated": 69,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 69,
      "inputs": {
        "security": 59,
        "vitality": 74,
        "community": 32,
        "governance": 48,
        "calibration": "2026-08-02",
        "engineering": 90,
        "ai_readiness": 85,
        "weighted_overall_raw": 62
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 128,
              "human_commit_share": 0.98,
              "days_since_last_push": 5,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "128 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 128
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 16,
              "latest_release_tag": "v0.9.0",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "16 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "ymmv-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2783
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,783 downloads/month across npm",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2783,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "weak",
        "name": "Sustainability & Governance",
        "value": 48,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "merged_prs": 40,
              "open_issues": 0,
              "closed_issues": 0,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "40/40 decided PRs merged",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 40,
                      "decided": 40
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/9 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "ymmv-fyi",
              "public_repos": 1,
              "account_age_days": 32
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of ymmv-fyi",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "ymmv-fyi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1 public repos, account ~0 yr old",
                "points": 2.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "ymmv-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "16 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "astro",
                "cli",
                "cloudflare-workers",
                "command-line-tool",
                "developer-profile",
                "developer-tools",
                "dotfiles",
                "terminal"
              ],
              "has_wiki": false,
              "homepage": "https://ymmv.fyi",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://ymmv.fyi",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 59,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "weak",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/9 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "9 existing vulnerabilities detected",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:ymmv-cli@0.9.0 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:ymmv-cli@0.9.0",
                  "assessed": 1
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 1,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 85,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 3020
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "98 of 98 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 98,
                      "sampled": 98
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "packages/cli/tsconfig.json",
                "packages/shared/tsconfig.json",
                "packages/web/tsconfig.json"
              ],
              "agent_commit_share": 0.83,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "packages/cli/tsconfig.json, packages/shared/tsconfig.json, packages/web/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/cli/tsconfig.json, packages/shared/tsconfig.json, packages/web/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "83 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 83,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 50191,
              "source_files_sampled": 84,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/84 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 84,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library",
        "application"
      ],
      "labels": [
        "cli",
        "library"
      ],
      "scores": {
        "cli": 6,
        "library": 6
      },
      "primary": "cli",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:npm",
          "weight": 6
        },
        {
          "tier": "description",
          "label": "cli",
          "source": "description:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:command-line-tool",
          "weight": 2
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-31T02:19:26.917259Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/y/ymmv-fyi/ymmv.svg",
  "full_name": "ymmv-fyi/ymmv",
  "license_state": "standard",
  "license_spdx": "MIT"
}