ytspar / devbar

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Die Installation von npm:@ytspar/devbar@1.18.3 zieht 9 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 4298,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "CSS": 50853,
        "HTML": 5219,
        "Shell": 4319,
        "JavaScript": 187310,
        "TypeScript": 2426017
      },
      "pushed_at": "2026-07-21T16:09:58Z",
      "created_at": "2026-01-28T12:00:20Z",
      "owner_type": "User",
      "updated_at": "2026-07-21T14:41:38Z",
      "description": "Development tools: DevBar and Sweetlink",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Yury Tsukerman",
      "type": "User",
      "login": "ytspar",
      "company": "Build Remote",
      "location": null,
      "followers": 36,
      "avatar_url": "https://avatars.githubusercontent.com/u/365593?v=4",
      "created_at": "2010-08-16T06:37:49Z",
      "is_verified": null,
      "public_repos": 20,
      "account_age_days": 5826
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "sweetlink-v1.27.0",
          "kind": "other",
          "published_at": "2026-07-21T14:38:05Z"
        },
        {
          "tag": "devbar-v1.18.3",
          "kind": "other",
          "published_at": "2026-07-17T19:09:37Z"
        },
        {
          "tag": "sweetlink-v1.26.4",
          "kind": "other",
          "published_at": "2026-07-17T10:36:08Z"
        },
        {
          "tag": "devbar-v1.18.1",
          "kind": "other",
          "published_at": "2026-07-06T07:04:16Z"
        },
        {
          "tag": "sweetlink-v1.26.3",
          "kind": "other",
          "published_at": "2026-07-06T07:02:45Z"
        },
        {
          "tag": "sweetlink-v1.26.0",
          "kind": "other",
          "published_at": "2026-06-25T06:22:30Z"
        },
        {
          "tag": "sweetlink-v1.25.0",
          "kind": "other",
          "published_at": "2026-06-23T17:08:45Z"
        },
        {
          "tag": "sweetlink-v1.24.6",
          "kind": "other",
          "published_at": "2026-06-19T12:08:56Z"
        },
        {
          "tag": "sweetlink-v1.24.5",
          "kind": "other",
          "published_at": "2026-06-19T10:56:49Z"
        },
        {
          "tag": "devbar-v1.18.0",
          "kind": "other",
          "published_at": "2026-06-08T15:19:25Z"
        },
        {
          "tag": "devbar-v1.14.3",
          "kind": "other",
          "published_at": "2026-05-06T07:26:41Z"
        },
        {
          "tag": "devbar-v1.14.2",
          "kind": "other",
          "published_at": "2026-05-06T07:18:17Z"
        },
        {
          "tag": "devbar-v1.14.1",
          "kind": "other",
          "published_at": "2026-05-06T07:08:47Z"
        },
        {
          "tag": "devbar-v1.14.0",
          "kind": "other",
          "published_at": "2026-05-06T06:42:07Z"
        },
        {
          "tag": "devbar-v1.10.6",
          "kind": "other",
          "published_at": "2026-04-27T06:37:40Z"
        },
        {
          "tag": "sweetlink-v1.21.0",
          "kind": "other",
          "published_at": "2026-04-27T06:37:39Z"
        },
        {
          "tag": "devbar-v1.10.5",
          "kind": "other",
          "published_at": "2026-04-27T03:42:35Z"
        },
        {
          "tag": "sweetlink-v1.20.0",
          "kind": "other",
          "published_at": "2026-04-27T03:42:34Z"
        },
        {
          "tag": "devbar-v1.10.4",
          "kind": "other",
          "published_at": "2026-04-27T02:53:21Z"
        },
        {
          "tag": "sweetlink-v1.19.0",
          "kind": "other",
          "published_at": "2026-04-27T02:53:20Z"
        },
        {
          "tag": "devbar-v1.10.3",
          "kind": "other",
          "published_at": "2026-04-26T15:44:54Z"
        },
        {
          "tag": "sweetlink-v1.18.0",
          "kind": "other",
          "published_at": "2026-04-26T15:44:52Z"
        },
        {
          "tag": "devbar-v1.10.2",
          "kind": "other",
          "published_at": "2026-04-26T15:44:51Z"
        },
        {
          "tag": "sweetlink-v1.17.0",
          "kind": "other",
          "published_at": "2026-04-26T15:44:50Z"
        },
        {
          "tag": "v1.15.0",
          "kind": "minor",
          "published_at": "2026-03-26T20:11:56Z"
        },
        {
          "tag": "devbar-v1.4.0",
          "kind": "other",
          "published_at": "2026-02-12T13:44:05Z"
        },
        {
          "tag": "sweetlink-v1.3.0",
          "kind": "other",
          "published_at": "2026-02-12T13:43:52Z"
        },
        {
          "tag": "devbar-v1.3.0",
          "kind": "other",
          "published_at": "2026-02-11T18:20:49Z"
        },
        {
          "tag": "sweetlink-v1.2.0",
          "kind": "other",
          "published_at": "2026-02-11T18:20:43Z"
        },
        {
          "tag": "devbar-v1.2.0",
          "kind": "other",
          "published_at": "2026-02-11T17:02:36Z"
        },
        {
          "tag": "devbar-v1.1.0",
          "kind": "other",
          "published_at": "2026-02-11T17:02:34Z"
        },
        {
          "tag": "sweetlink-v1.1.0",
          "kind": "other",
          "published_at": "2026-02-11T17:02:31Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-02-09T18:23:34Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "48cfa865e8c224fccf426d5bc3510d64a1487c25",
          "body": "* chore(main): release sweetlink 1.27.0\n\n* chore(sweetlink): re-key the release note to 1.27.0\n\nThe batch-mode feat rolled the pending release from 1.26.5 to a minor, so the\nnote has to move with it or the release-notes gate blocks the PR. Folded the\nbatch-mode measurements into the same entry.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(main): release sweetlink 1.27.0 (#37)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-21T14:37:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c1fb107d5ff30e46b628c256797526cb4692ac5b",
          "body": "Once the daemon fix removed the per-frame browser launch, the dominant cost\nbecame Node startup and module load — paid once per frame because every caller\ndrove captures as a shell loop of separate CLI invocations.\n\n`screenshot --batch <manifest.json|->` takes the whole frame list up front and\ncaptu\n[…]\nit would make every frame overwrite the last, and a directory of\nidentical frames reads downstream as a capture bug rather than a bad manifest.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): add --batch to capture many frames in one process",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-21T10:03:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51054c50fbb1bdea306321e24df03e27db0334f0",
          "body": "Two defects that together made automated capture slow, and its output\nunreviewable.\n\n**Every headless capture cold-launched a browser.** The persistent daemon was\ngated behind `--hifi`/`--responsive`, so the automated callers — visual-evidence\ngallery frames, batch capture runs — never reached it an\n[…]\n Pages rendered without devbar never host one; the message\ndescribed a fault that isn't one and named an engine that is no longer the\none used.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(sweetlink): reuse the daemon browser and honour Portless URLs",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-21T08:11:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9a39d3788dabe5279d2d45de3e14ec9f99b4461a",
          "body": "* chore(main): release devbar 1.18.3\n\n* docs(devbar): add 1.18.3 release note for the release-notes gate\n\nThe DEV-6497 quiescent-capture badge-hide fix (#35) shipped without its\nplayground release-notes.json entry, so the Release PR's release-notes\ngate failed. Add the 1.18.3 note so the gate passes and the publish runs.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(main): release devbar 1.18.3 (#36)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-17T19:09:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fc8bb93f6ed1503c48a9bbd43deb85e413153cd8",
          "body": "`suppressFrameworkDevIndicators` dropped the shadow-root style injection\nwhen the `nextjs-portal` element was present but its shadow root had not\nattached yet. The light-DOM MutationObserver sees the portal insertion\n(shadow still null) but never the later shadow attach — that's a shadow-DOM\nmutatio\n[…]\ndy, then\ngive up so a never-attaching portal can't spin forever. Adds a regression\ntest where the shadow root attaches after the portal mounts.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(devbar): retry badge-hide injection for quiescent captures (#35)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-17T18:18:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "01cbd39a6d2f259bc0cec41ebd487c703c6aa455",
          "body": "…5) (#34)\n\nThe DEV-6469 guard printed the tag to re-push using the single top-level\n`tag_name` output. This repo is a manifest (multi-package) release-please\nsetup, where that output is usually empty — the tags live in per-path\noutputs (`packages/devbar--tag_name`, …). So the recovery instruction fe\n[…]\nsteps.release.outputs)` via jq, list\nall released tags, and emit a per-tag re-push loop. Keeps the single\n`tag_name` and placeholder fallbacks.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(release): list every released tag in the no-publish guard (DEV-649…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-17T18:17:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3049085e27ee1e16731a17b410f18ab0e16e9ae5",
          "body": "… (#33)\n\nA release-please tag created with the fallback GITHUB_TOKEN cannot trigger\nrelease.yml — GitHub mutes workflow triggers on refs pushed with\nGITHUB_TOKEN — so when RELEASE_PLEASE_TOKEN is unset the npm publish\nsilently never runs and the version is tagged-but-unpublished. That's how\ndevbar 1\n[…]\n\n(re-push the tag from a real credential). When the PAT is present it\npasses silently. Converts a silent no-publish into an unmissable red run.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(release): fail loudly when a release can't auto-publish (DEV-6469)…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-17T16:57:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4ce531f78b0537c41d28888ffe325ae0e87cca58",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release devbar 1.18.2 (#32)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T13:31:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3c3591a3b1999057951a32fef31583297e80b4c",
          "body": "The Next.js dev-tools indicator (the floating \"N\" badge) renders inside a\n`nextjs-portal` shadow root, fixed to a bottom corner. At rest it\nduplicates the devbar, sits on top of page content, and pollutes\nscreenshots — and shadow-DOM encapsulation means no capture pipeline can\nhide it from the outsi\n[…]\n `[data-nextjs-dialog-overlay]`\nerror overlay) stay fully visible. `data-error` is live, so the CSS\nreacts on its own. Disposed on `destroy()`.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(devbar): hide the benign Next.js dev-tools badge from captures (#28)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-17T12:07:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7e594ad253ead60b665fd4e118cef3dd1b9baed5",
          "body": "* chore(main): release sweetlink 1.26.4\n\n* docs: release note for sweetlink 1.26.4\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Yury Tsukerman <ytspar@yandex.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(main): release sweetlink 1.26.4 (#31)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T10:35:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f3e7a558dbdd79da14fede397797990fd7e20a79",
          "body": "… (#30)\n\nThe two self-contained review UIs could let a wider-than-container\nimage escape its box:\n\n- viewer.ts: the video/screenshot is a flex item whose default\n  min-width:auto can refuse to shrink below the media's intrinsic\n  width despite max-width:100%. Add min-width:0; min-height:0 so it\n  ac\n[…]\nuto to img for aspect ratio when\n  clamped; and make figure min-width min(300px,100%) so narrow\n  viewports don't force horizontal page scroll.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(sweetlink): keep wide images/video inside the HTML review viewers…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-17T10:32:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06492d0d547b46ec30485455a07526e7f82f3a5d",
          "body": "The release-please PR for 1.26.3 merged without its hand-written playground\nnote, so the publish workflow's 'Validate release notes' step fails and\n1.26.3 is tagged but unpublished. Same gap class as verticalint DEV-5362.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: release note for sweetlink 1.26.3",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-16T09:32:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7703e8ba2f92a50baaf513b0ebc4f9e3e65849dd",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release devbar 1.18.1 (#27)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-06T07:04:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66f78a483e5bd2198672d97dd078193ca301a34a",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release sweetlink 1.26.3 (#26)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-06T07:02:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b47fc34aae616e1ebad9a6e6e9912f8393a7c88",
          "body": "…#25)\n\n* fix(sweetlink): resolve agent-bridge WS endpoint correctly under HTTPS proxies\n\nRepro: Next.js 16 (Turbopack) app behind a Portless HTTPS proxy\n(https://places.localhost → app port 4836, sweetlink WS on 11059).\nThe browser client derived the WS port from location.port (443) + 6223\n= 6666 an\n[…]\nt-of-bounds errors preserved; explicit\nselector paths locked to old behavior.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: agent bridge under HTTPS proxies + daemon navigation/lifecycle (…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-05T18:07:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e99e38c62f1ce43e676a2f96be4305075b80445b",
          "body": "Adds the missing release note that blocked the 1.26.2 publish (the\nprepublishOnly check-release-notes gate, #22, requires an entry). Note\ncovers the opacity:0 devbar-hide fix (#24).",
          "is_bot": false,
          "headline": "docs: release note for sweetlink 1.26.2",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-03T05:39:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7dd12aff4f5e26647126f715b33765fc064a633",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release sweetlink 1.26.2 (#23)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-02T22:28:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5003bb4187d130888bd79825fdb301b3c9eb2827",
          "body": "…eak (#24)\n\nThe screenshot devbar-hide injected `visibility: hidden !important` on\n`[data-devbar]`. That's escaped when the devbar is EXPANDED: its toolbar\nbuttons/icons are descendants that set their own `visibility`, so a\ncontainer-level `visibility: hidden` doesn't cover them and the bar leaks\nin\n[…]\n`nextjs-portal` (which also hosts the error\noverlay we want captured).\n\nVerified end-to-end: el-visual-evidence /finances capture is now free of the\ndevbar and query-devtools overlays. Tests extended.",
          "is_bot": false,
          "headline": "fix(sweetlink): hide devbar with opacity:0 so an expanded bar can't l…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-02T22:28:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a1121a05c231c9d96566b28d5cb3d6fe2ef92e6",
          "body": "… guard (#22)\n\nrelease-please bumps package versions but never writes the hand-maintained\npackages/playground/src/release-notes.json entry that check-release-notes.mjs\nrequires at publish time — so the first automated publish (sweetlink 1.26.1)\nfailed twice, after merge, when the author had moved on\n[…]\nad of stripping\n  the suffix and still requiring the base version's note. Canaries publish\n  not-yet-released versions; the note is authored later on the Release PR.\n  Production versions stay strict.",
          "is_bot": false,
          "headline": "ci: gate release PRs on release notes; exempt canaries from the notes…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-02T15:21:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "960fe0bd793f1a7c6a0f282f893a2e50470ff289",
          "body": "The release-notes prepublish guard blocked the first release-please\npublish (canary run 28593594496): release-please bumps versions but\ndoes not write release-notes.json entries — a template integration gap\nto note in the runbook. Entry added for the resize-for-claude skill fix\n(DEV-5303).",
          "is_bot": false,
          "headline": "docs: release note for sweetlink 1.26.1",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-02T13:41:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fd5566402023d15865416a092465d8311591cb9",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release sweetlink 1.26.1 (#21)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-02T13:25:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "489eb5253f747630aec07084024f82d2750ebaab",
          "body": "* feat: add release-please automation for both packages\n\nOn merge to main, release-please opens per-package Release PRs\n(conventional commits -> version + CHANGELOG); merging one creates the\npackage's sweetlink-vX.Y.Z / devbar-vX.Y.Z tag (existing scheme) and a\nGitHub release, and the tag triggers t\n[…]\n.0 lets release-please\ncorrectly capture and ship the pending delta. Also documents that the\nmanual production dispatch is emergency-only and desyncs the manifest\nunless it's bumped by hand afterward.",
          "is_bot": false,
          "headline": "feat: add release-please automation for both packages (#20)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-02T10:30:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dd3c1f1de99170fe28eda9af7c2c0bad2bfe2e71",
          "body": "* fix(sweetlink): bundle resize-for-claude script with its skill\n\nThe skill referenced a script at <tools-repo>/scripts/resize-for-claude\nthat no longer exists anywhere — the tools repo deleted it in its\nDEV-3464 reorg as 'duplicated the skill', but the skill only documented\nit. On top of that, the \n[…]\n prefix\n(npm packing drops the executable bit), clarify downscale-only behavior,\nclear stale -partN tiles on re-run, and fail friendly on non-image input\n(validates sips dimensions before arithmetic).",
          "is_bot": false,
          "headline": "fix(sweetlink): bundle resize-for-claude script with its skill (#19)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-07-02T08:20:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd4cedf4b27f895108b37e5bd80358d85acda899",
          "body": "…e (#18)\n\nSurface the canonical devbar-hide screenshot rule publicly so downstream\nconsumers (the el-visual-evidence CLI in vertical-int/tools) can import it\ninstead of hand-maintaining a drifting copy.\n\n- Re-export HIDE_DEVBAR_CSS, HIDE_DEVBAR_STYLE_ID, SELECTOR_TIMEOUT_MS,\n  HOVER_TRANSITION_DELAY\n[…]\ne-exports stay in sync.\n- Bump sweetlink to 1.26.0 + release note.\n\nPrereq for vertical-int/tools DEV-4982 (consumes this export).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "DEV-4982: export HIDE_DEVBAR_CSS from @ytspar/sweetlink public surfac…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-25T06:18:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4b31fa62d9ff40a9426a1d9c7018300e530d5a48",
          "body": "The three cycle-1-deferred unit tests for the DEV-4874 hardening fixes\n(landed in #16), as a test-only follow-up:\n\n- recording.test.ts: stopRecording logs the null-video warning + writes a\n  manifest with video undefined when page.video() is null; getRecordingStatus\n  is pause-aware (duration exclud\n[…]\ntarting its own (leak fix), and rolls back the optimistic UI on a\n  success:false response.\n\nTest-only (111/111 in the two files).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "DEV-4893: backfill recorder/devbar hardening tests (#17)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-23T04:10:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "34500460e1b2f02ed89f8158137953743a4e876c",
          "body": "…idence (#16)\n\n* DEV-4874: sweetlink viewer exports + recorder hardening for motion evidence\n\nMake the session-recording output pipeline consumable from outside the\ndaemon, and harden the recorder, so el-visual-evidence can reuse it for\nmotion/video evidence (DEV-4873).\n\nAdditive (sweetlink 1.25.0):\n[…]\nure-rollback (need the devbar DOM-state harness).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "DEV-4874: sweetlink viewer exports + recorder hardening for motion ev…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-21T16:27:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "889a040108941ab6d54e86eff84ea70d0c04d1f4",
          "body": "…814) (#15)\n\n`@ytspar/sweetlink@1.24.5` silently dropped\n`claude-skills/resize-for-claude/SKILL.md` from the published tarball —\nonly the `evals/` directory remained. The skill is referenced by\n`tools/claude/skills/figma-design/SKILL.md` as the canonical \"prepare\nimage for Claude vision\" path, so th\n[…]\ntory.\n\nNo source/runtime change. Downstream consumers (tools) can re-add the\n`claude/skills/resize-for-claude -> @ytspar/sweetlink/claude-skills/resize-for-claude`\nsymlink once they upgrade to 1.24.6.",
          "is_bot": false,
          "headline": "fix(sweetlink): bump 1.24.6 to ship resize-for-claude/SKILL.md (DEV-4…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-19T12:07:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8582affb192fbdfa66af3e2896332ed3d1f413ef",
          "body": null,
          "is_bot": false,
          "headline": "docs(sweetlink): add Claude skill examples",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-19T11:02:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "765d8f8ee091e34f3f5146e105aaa58e75853a73",
          "body": null,
          "is_bot": false,
          "headline": "ci: repair npm trusted publishing workflow",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-19T10:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "464a4f4d0f6e557f6dc5d1648e39b7416a9b529d",
          "body": "…) (#13)\n\n* refactor(sweetlink): dedupe Claude-skill prose, bump 1.24.5 (DEV-4697)\n\nThe three Sweetlink-driven Claude skills (screenshot, console-check-sweetlink,\nresponsive-screenshots) each carried their own copy of the Sweetlink\narchitecture / prerequisites / CLI surface / daemon lifecycle prose \n[…]\nmanual skill re-sync needed.\n\nNo behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(sweetlink): dedupe Claude-skill prose, bump 1.24.5 (DEV-4697…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-18T23:05:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7a72e7a29e8601bbeb371187db0b32aeaa1db1cc",
          "body": "…nore (DEV-4726) (#14)\n\nThe bare `claude-skills/` rule was intended to ignore consumer-project\nsymlinks to the published @ytspar/sweetlink package, but was also\nmatching the source-of-truth directory inside packages/sweetlink/.\nOnly screenshot/SKILL.md was tracked (force-added long ago); the other\nt\n[…]\nde}/SKILL.md → NOT ignored\n- tools/.claude/skills/screenshot/SKILL.md → still ignored\n- top-level claude-skills/foo/SKILL.md → still ignored\n- packages/other/claude-skills/foo/SKILL.md → still ignored",
          "is_bot": false,
          "headline": "chore(devbar): carve out packages/sweetlink/claude-skills/ from gitig…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-18T21:12:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e7bf4757c8e24cb05c578000da9cf1af086f254",
          "body": "…EV-4521) (#12)\n\nThe Sweetlink WebSocket has no origin/auth model, so honoring `exec-js`\nunconditionally was an unauthenticated RCE: any local process — or any web page\nthat can reach `ws://localhost:<port>` (WebSocket connections aren't gated by\nsame-origin policy) — could execute arbitrary JS in t\n[…]\n #10\nmerges. A full out-of-band nonce/secret handshake (so trusted callers don't need\nthe blanket opt-in) is a future enhancement.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(devbar): exec-js OFF by default — close unauthenticated WS RCE (D…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-06T17:14:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4161e1c7b653f8a29934005ff438f3faf7d1b812",
          "body": "Safe, high-value fixes surfaced by a 3-agent deep review.\n\nBundle (~790KB off the eager browser bundle):\n- build-browser.mjs now uses esbuild code-splitting so axe-core + html2canvas-pro\n  (already lazy-import()ed in source) are emitted as on-demand chunks instead of\n  inlined. Eager entry ~992KB → \n[…]\nbmit/empty-guard),\nEsc-resync regression, and initGlobalDevBar annotate wiring. Full suite green\n(1146 devbar tests), build clean.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(devbar): hardening + optimization round (DEV-4520) (#10)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-06T16:56:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "71ad8e3d47cf4dd2b5a677a3f7116ca83ecfc7d4",
          "body": null,
          "is_bot": false,
          "headline": "fix(devbar): keep inline release badges content-sized (#7)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-06T04:43:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ecdf44b91991a329daa7828259e0ddc12f7152b",
          "body": "…24.4) (#8)\n\nVisual evidence must show the change IN CONTEXT in the running app —\ncomponent-library/gallery views are a secondary source. Scale coverage to\nthe change: in-context page capture; per-state frames for interactive\nelements; all-path frames for multi-step/branching elements; a process\nsto\n[…]\n) and durable, CI-runnable specs\ncommitted to the e2e suite.\n\nGeneralizable principle; downstream projects enforce it in their own\nCLAUDE.md / skills (e.g. Enrich Layer's el-visual-evidence workflow).",
          "is_bot": false,
          "headline": "docs(sweetlink): add Coverage section to UI Verification Mandate (v1.…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-06T04:26:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "74b5780f28958e983c67aa647468d35c76d34d22",
          "body": "Adds an \"Annotate\" toolbar control — the in-context, live-page companion to the\nel-visual-evidence standalone review UI. Click an element on the running page to\npin a region comment (fix/question/praise); the pin POSTs to the\n`el-visual-evidence review-ui --listen` server and lands in the same\nfeedb\n[…]\nviewport/submit/lifecycle/control-toggle). Full suite\n  green (2445 tests, no regression). Version 1.15.1 → 1.16.0 + release note.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(devbar): live visual-feedback Annotate control (DEV-4516) (#9)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-06-06T04:26:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3925fe077cd2226a0b3a177d3e24bf1a9d26d32d",
          "body": "1.15.0 shipped with stale dist/ from before the source edits, so the\nautoConnect option had a version bump but no runtime/type behavior. This\nrelease ships the same source built fresh. 1.15.0 will be deprecated on\nthe registry with a redirect message.\n\nAlso: add `.npmrc.publish` to .gitignore (used as an ad-hoc auth file\nfor local publish runs; should never be committed).",
          "is_bot": false,
          "headline": "chore(release): devbar 1.15.1 — rebuild with proper dist (#6)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-11T10:16:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0683e07c93bd162aa0d9a3b2438e19c0171081d0",
          "body": "New `sweetlink.autoConnect` option (default `true`). When set to `false`,\nthe initial WebSocket connect from setup is skipped — for projects that\nload devbar but don't run the Sweetlink CLI, where the browser's\nunsuppressible `WebSocket connection to 'ws://...' failed: ECONNREFUSED`\non every page lo\n[…]\nl opt in at runtime via\n`globalDevBar.connectWebSocket()`.\n\nNo behavior change for existing setups (autoConnect defaults to true).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(devbar): sweetlink.autoConnect option to silence WS noise (#5)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-11T08:37:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a00fef35614f9d2566971bee5a647b4d293e2685",
          "body": null,
          "is_bot": false,
          "headline": "Fix modal clipboard copying",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-09T19:28:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ceb819cd25c006f906746d0849faf4e64fd3b9bf",
          "body": null,
          "is_bot": false,
          "headline": "Default devbar to compact on small screens",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-09T16:51:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8702c881d486fadb93cdba0b0a1c9bacd99dc657",
          "body": null,
          "is_bot": false,
          "headline": "Fix devbar custom controls spacing",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-09T15:27:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da07c30feeae4b194d3413dd4e883ad6a8cc7d28",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): sweetlink 1.24.3 and devbar 1.14.6",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-09T09:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de480c105bf1e4e7a1e2a52cc33fc528bfa41d24",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): devbar 1.14.5",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-09T08:28:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fceb064878fa440a7e598caeb85988cf8d85e4ba",
          "body": null,
          "is_bot": false,
          "headline": "Match tooltip text color to trigger controls",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-09T08:21:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8faca11aaebf014bf1886e39f6a6ab8ad5967409",
          "body": "Widens sweetlink's `vite` peer-dependency range to include `^8.0.0`\n(was `^5 || ^6 || ^7`). Vite 8 is GA and consumers were hitting\npeer-conflict errors on install. devbar bumped so workspace:^\nresolves to the patched sweetlink.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): sweetlink 1.24.1 + devbar 1.14.4",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-06T18:35:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "02b9cca6846017c89ad45bef45d765a7c55159fe",
          "body": null,
          "is_bot": false,
          "headline": "fix(devbar): compact simulated mobile controls",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-06T07:24:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9095c1a2d05490eecad7f6f83ee797bdf3542705",
          "body": null,
          "is_bot": false,
          "headline": "fix(devbar): shrink medium release badge layout",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-06T07:16:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79019025998516240e8484eb4fce9352b6bbc058",
          "body": null,
          "is_bot": false,
          "headline": "fix(devbar): sync themes and tighten release badges",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-06T07:07:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "180c708b57ba34652e8f1f934985e259c564dd71",
          "body": null,
          "is_bot": false,
          "headline": "feat(devbar): add release info plugin",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-06T06:40:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73a52fd4073d02b7d275a9eb0194a6ef8c295c97",
          "body": "Hardening release rolling up the multi-agent product-finalizer audit work:\n- 5 critical security fixes (path traversal cluster, WS proxy origin-pin,\n  viewer XSS encoder)\n- 10 P1 race/leak fixes (CLI routing FIFO, pendingRequests WeakMap,\n  recording goto rollback, safeRegex alternation guard, daemo\n[…]\ndules\n- vite 7.3.2 override patches dev path-traversal advisory\n\nVerified: pnpm typecheck + 2411/2411 tests + pnpm build all pass.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Release: devbar 1.13.0 + sweetlink 1.24.0",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T17:21:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "90a6cb7801767e939eb8a46fa46343da07bb0aeb",
          "body": "77 new tests across the modules el-audit flagged as missing tests.\nCombined with the prior TST1 batch, this brings 12 more source files\nunder colocated test coverage. The 11 still-untested files are build\nconfigs (vite/vitest/playwright), entry points (browser.ts/server.ts),\nthe 4000-line daemon/ser\n[…]\nring artifacts)\n  - Pure function — does not mutate process.env\n\nVerified: pnpm typecheck + 2411/2411 tests + pnpm build all pass.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add tests for 12 more modules to close TST2 coverage gap",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T17:15:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bf3dfdfcedd083718deede52218546a0351488e3",
          "body": "72 new tests across the modules the audit flagged as load-bearing but\nuntested. Each test covers real behavior and regressions, not vanity\ncoverage.\n\npackages/sweetlink/src/daemon/listeners.test.ts (24 tests):\n  - installListeners is idempotent on the same Page object\n  - Multi-page captures merge i\n[…]\n tests for the\ne2e harness run alongside the rest of the suite.\n\nVerified: pnpm typecheck + 2334/2334 tests + pnpm build all pass.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add tests for 5 critical modules previously without coverage (TST1)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T16:53:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a70663e75729c35d22aca409abe99a21ad26174c",
          "body": "Replace 28-case switch in sweetlink.ts with a dispatch via named handler\nfunctions. Each command's logic is now in a standalone async function\nthat can be tested in isolation by importing the handler directly.\n\nThe switch body is now ~70 lines of simple `case 'X': result = await\nhandleXCmd(); break;\n[…]\nCmd\nfunction instead of nested if/else inside the switch.\n\nNo behavior change. Verified: pnpm typecheck + 2262/2262 tests + build.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Extract CLI dispatch into named handlers (Simp #6)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T16:45:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "31ec3b80447e4bffb0a17cdab05d8ea53b1fd7b0",
          "body": "Security (adversarial P0/P1/P2):\n- Path traversal: sanitize HMR trigger slug + new confinePath helper for\n  daemon generate-viewer / visual-diff sessionDir/outputPath (P0 #1-3)\n- Origin-pin WS recording/HiFi proxies to the daemon's app port so a\n  malicious page on a different localhost port can't t\n[…]\n deps in dev audit)\n- Delete unreferenced 145KB devbar-anim.gif\n\nVerified: pnpm typecheck + 2262/2262 tests + pnpm build all pass.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Harden security & tighten public-API types from product-finalizer audit",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T16:34:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f2060ebef8505b2eb64c99417881fd96a4c9ad7",
          "body": "Expanded mode hard-coded the wrapper color to CSS_COLORS.primary, so a\ncustom or non-emerald accent produced a mismatched border/text pair\n(e.g. red border with green text). Collapsed and compact layouts\nalready used accentColor; align expanded.\n\nBumps devbar to 1.12.1.",
          "is_bot": false,
          "headline": "Make expanded toolbar text follow the accent color",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T06:23:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6564d07ff91f0e13155bdc24f0514b50d99bbd1d",
          "body": "- New `@ytspar/devbar/browser` and `@ytspar/devbar/browser/auto` exports\n  ship pre-bundled, self-contained ESM for no-bundler consumers via an\n  internal esbuild step (added as a devDependency).\n- Settings popover accent picker now highlights Emerald when the\n  persisted accent is the theme-default\n[…]\nd for fresh installs).\n- Custom accent values surface a `custom · reset` pill so users with a\n  non-preset hex can return to the theme default without clearing\n  localStorage.\n\nBumps devbar to 1.12.0.",
          "is_bot": false,
          "headline": "Add browser bundle entry and fix accent picker UX",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-05T05:30:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45bc8bc198f295f0b2dd23744f8d15ad67ec0313",
          "body": null,
          "is_bot": false,
          "headline": "Make devbar site agent-friendly",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-05-01T18:59:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2da2213ad3f84568e88abed2d01411cc85716434",
          "body": null,
          "is_bot": false,
          "headline": "Pin pnpm version in DevBar workflows",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-29T16:25:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ebca9b55afe55d32b0ab7aad10de896d9749dfd",
          "body": null,
          "is_bot": false,
          "headline": "Update DevBar workflows to Node 24 actions",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-29T16:23:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbaf7b13dd068d2687acda34ea90e887a44b42d6",
          "body": null,
          "is_bot": false,
          "headline": "Fix DevBar package publish workflows",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-29T16:21:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd47c66f92698a0db84d407f5771b80d3336ab8d",
          "body": null,
          "is_bot": false,
          "headline": "Add DevBar theme mode controls",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-29T16:17:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dde3544ec90515c0e1075ecf7068316a9104b9d3",
          "body": null,
          "is_bot": false,
          "headline": "Add Portless support to devbar",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-29T10:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbefaa496a7b0f0fa792ba8f0daef2cc5b452025",
          "body": null,
          "is_bot": false,
          "headline": "fix: support portless localhost origins",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-28T21:23:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d655ed842f94814f1bd5e5b9ad6b57c767c0470d",
          "body": null,
          "is_bot": false,
          "headline": "feat: auto-hide devbar screenshots and harden demo UI",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-28T08:54:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39cf846c7fa7372f489245d0595f66c933f6a1d6",
          "body": null,
          "is_bot": false,
          "headline": "Use direct Wrangler deploy for Cloudflare Pages",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-28T05:10:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3b1dc2b7113aacea1ab05ba6da8bb4a07446fb4",
          "body": null,
          "is_bot": false,
          "headline": "Fix Cloudflare Pages workflow wrangler install",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-28T05:07:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16c2f80142d5d81b3a51b1145c481bc412c11237",
          "body": null,
          "is_bot": false,
          "headline": "Add hide-devbar screenshots and Cloudflare Pages deploy",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-28T05:05:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d8ee6af6d733bee11ca953f524eb6873fa0deab",
          "body": null,
          "is_bot": false,
          "headline": "Harden devbar custom plugin layout",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T20:26:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aba23adeb88edb91c317fdcfba1264fea48f111",
          "body": null,
          "is_bot": false,
          "headline": "Harden frontend assistant evidence and mobile UX",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T20:07:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35e9e5cfe962a8251f5051beb2c521f0066afd15",
          "body": null,
          "is_bot": false,
          "headline": "Improve frontend assistant evidence and demo UX",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T14:31:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b6cf2a06da65f904ace0c721f9d938cecc2eddb",
          "body": "Sweetlink 1.21.0 → 1.22.0 (minor); Devbar 1.10.6 → 1.10.7 (patch).\n\nSecurity (P0)\n- term/cast.ts: escapeJsonForScript escapes </script>, <!--, U+2028/U+2029\n  before the JSON.stringify result is interpolated into the player's inline\n  <script> block. Recorded shell output containing those bytes prev\n[…]\ne} — no cleanup needed)\n- E1-E51 (intentional graceful-degradation in CLI/daemon)\n- D1-residual (6 dev-only pnpm advisories above)\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "hardening: audit findings — security, bug class, type design, cleanup",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T10:28:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "235fe17b0e018449f71a4c1384b0699f730fe3be",
          "body": "….21.0)\n\nWhile `adb shell screenrecord` captures the screen, a parallel\n`adb shell getevent -l` listener parses BTN_TOUCH DOWN/UP +\nABS_MT_POSITION_X/Y events into (x, y, t) tuples. Coordinates are\nscaled from raw input-device units to screen pixels using a one-off\n`getevent -p` probe (for the input\n[…]\n-overlay/.\n\n2352 unit + 82/85 e2e tests pass (3 skipped: platform-conditional sim).\n\ndevbar 1.10.6 is a workspace re-resolve bump.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): Android tap-indicator overlays for sim recordings (1…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T06:36:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9638bc8788202a2a4aab4500b82095264998aa9a",
          "body": "Two more `proof`-parity items.\n\n**Multi-capture JSON-stdin batch mode.**\n`cat captures.json | sweetlink --json` reads\n  { action: \"capture\", captures: [...] }\nfrom stdin and runs each entry sequentially, aggregating results into\na single envelope on stdout:\n  { ok, duration, captures: [{ ok, mode, l\n[…]\n83 e2e + 2334/2334 unit tests pass (3 skipped are platform-\nconditional sim tests).\n\ndevbar 1.10.5 is a workspace re-resolve bump.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): JSON-stdin batching + app/date/run hierarchy (1.20.0)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T03:42:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b83fbaa5fedf32798d0f105838d6e421704a9403",
          "body": "Two new capture modes inspired by automazeio/proof — broaden sweetlink's\n\"evidence-of-work\" coverage from browser-only to terminal and native\nmobile simulators.\n\n`sweetlink term <command>` records any shell command's stdout/stderr\ninto asciicast v2 (`.cast`) plus a self-contained HTML player. The\npl\n[…]\ntates (booted vs shut-down) confirmed green.\n\nTotal: 2334 unit + 73 e2e tests pass.\n\ndevbar 1.10.4 is a workspace re-resolve bump.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): terminal + simulator capture (1.19.0)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-27T02:52:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f7f77fc6d32b7e55053ff4aba4f95337d6c574a7",
          "body": "Quick wins:\n- Compact one-line `screenshot ✓ path · WxH · KB · method` output\n  (multi-line behind SWEETLINK_VERBOSE=1).\n- ActionEntry.duration now populated from real wall-clock time on\n  click/fill; SUMMARY action timeline gets a \"Took\" column.\n- Session IDs are ISO timestamps (`session-2026-04-26\n[…]\ne2e/wave-features.spec.ts` (62/62 e2e\n+ 2334/2334 unit pass).\n\ndevbar 1.10.3 is a workspace re-resolve bump for the new sweetlink.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): 20 round-2 UX polishes (1.18.0)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-26T15:36:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e19eb34f00c59cabd60290e8e3a688e0cb54c48e",
          "body": "TDD'd against an isolated harness (e2e/_harness.ts) with each bug\ncaptured as a failing test before being fixed. 52 new e2e tests gating\nthe behaviours.\n\nBug fixes (all gated by e2e/*-bugs.spec.ts):\n- Recording manifest now counts in-session console errors and network\n  failures (was hardcoded 0); l\n[…]\napshot; CLI suppresses stack traces unless SWEETLINK_DEBUG=1.\n\ndevbar 1.10.2 is a workspace re-resolve bump for the new sweetlink.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): TDD audit — 9 bug fixes + 17 UX polishes (1.17.0)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-26T13:26:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "21da5fd68bf2aef98c10268044428f0d9bfdf273",
          "body": "1.10.0 was published with npm publish, which doesn't rewrite the\n@ytspar/sweetlink workspace:^ dependency to a concrete version.\nInstalling 1.10.0 fails outside the monorepo.\n\n1.10.1 is the same code, republished via pnpm publish which rewrites\nworkspace protocols. Deprecating 1.10.0 on npm so consumers upgrade.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(devbar): republish as 1.10.1 via pnpm (resolve workspace:^) (#4)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-24T17:30:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b159afff2053b90606525dc57e12dd7489dc54c2",
          "body": "Adds a new plugin entry point @ytspar/devbar/plugins/consent-debug.\n\nGated on window.zaraz: polls until Cloudflare's consent API is injected,\nthen registers a \"Consent\" toolbar control. Clicking opens a modal for\nQA'ing cookie-consent flows without a VPN:\n\n- Mock geo regions (EU-DE/FR, UK, CA, VA, J\n[…]\naked in.\n\n1214/1214 tests pass; 4 new specs cover immediate registration,\ndeferred registration, timeout, and cleanup-during-wait.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(devbar): consent-debug plugin (1.10.0) (#3)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-24T17:28:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51cc5867cbdd92deb91f6d88c90f04c40ade7855",
          "body": null,
          "is_bot": false,
          "headline": "chore(release-notes): sweetlink 1.16.1",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-23T10:09:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ecea1338d70295c7d0feaa4705d8547e2456df9",
          "body": "Node's CJS resolver needs a 'require' or 'default' condition to resolve\nESM-only subpath exports when consumed from a non-ESM package. Without\nit, any consumer whose package.json lacks \\`\\\"type\\\": \\\"module\\\"\\` (the\ndefault) hits ERR_PACKAGE_PATH_NOT_EXPORTED on imports like\n@ytspar/sweetlink/browser\n[…]\ner\nor tsx in CJS mode without forcing them to declare type: module.\n\nReported by the security1000 repo, which was carrying a local pnpm\npatch for this. The patch can now be removed in favor of 1.16.1.",
          "is_bot": false,
          "headline": "fix(sweetlink): add default condition to subpath exports (1.16.1)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-23T09:55:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a8f266110ff8da47fc4986b7afd2473c47284595",
          "body": "3 eval cases per skill (2 positive triggers + 1 negative routing test):\n- screenshot, console-check-sweetlink, responsive-screenshots, resize-for-claude\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): add eval test cases for all bundled Claude skills",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-04T19:28:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c4adce7b796e06ae39eaca3abf3ea649e1365fc9",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump sweetlink to v1.16.0",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-04T17:34:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bd745d288f3b5f1bae7530724c504c3c5ecbbc2c",
          "body": "Move sweetlink-related Claude Code resources from enrichlayer/tools\ninto the sweetlink package so they ship with npm publish. Consumers\nget screenshot, console-check, responsive-screenshots, resize-for-claude\nskills, the sweetlink-visual-iterative agent, and architecture/CDP/\nverification context files out of the box.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): bundle Claude skills, agents, and context files",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-04-04T17:33:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "56e8aece004d01a04269cbeb3aa5d31bf6b94df4",
          "body": "The prepublishOnly hook runs check-release-notes.mjs which requires\na matching entry in release-notes.json. Canary versions like\n1.15.0-canary.84b58f0 don't have entries — only stable versions do.\n\nFix: strip the prerelease suffix (everything after the first hyphen)\nand check for the base version instead. 1.15.0-canary.84b58f0 now\nmatches the 1.15.0 release note entry.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: canary release — strip prerelease suffix in release notes check",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T20:16:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "84b58f0ce7f9597109ea3846b9834afa2d867c43",
          "body": "sweetlink v1.15.0: Demo docs, universal sharing, error detection,\nSUMMARY.md, git metadata, overlay toggle, HiFi from UI, comparison tables\n\ndevbar v1.9.2: Demo button + HiFi Alt+Click in toolbar, recording\nauto-opens viewer, demo state fields\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump sweetlink to v1.15.0, devbar to v1.9.2",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T20:10:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "66f10b50321ae2c10c33a706156dafd891aeb364",
          "body": "TST1: Add demo.test.ts (34 new tests) covering initDemo, addNote,\n  addExec, addScreenshot, addSnapshot, popSection, renderDemo,\n  verifyDemo, writeDemo — with mocked fs and child_process\n\nBUN1/errorPatterns: Wire detectServerErrors() into record-stop flow.\n  The errorPatterns module was created but\n[…]\ner defaults. Not stale.\n\nBUN1: 5 \"dead\" files are config files and CLI entry points. Not dead.\n\n87 test files, 2330 tests passing.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: address all product-finalizer audit findings",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T19:38:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "34da7ef346d9e42a9dd8a1a780e69d404e7b1f4d",
          "body": "Replaces the old 11-row comparison table with three detailed tables\ncovering all v2 features:\n\n1. Screenshot & Interaction: vs Playwright CLI, Chrome DevTools MCP,\n   agent-browser — covers token cost, fast/hifi/responsive screenshots,\n   device emulation, @ref system, persistent sessions\n\n2. Eviden\n[…]\nrt, a11y, vitals, ruler\n\nAlso updates \"When to Use\" section to reflect v2 capabilities\n(always-on capture, demo docs, toolbar UI).\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add comprehensive comparison tables vs alternatives",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T17:55:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "babc4edc25cf2ef36d1339853f459bb7616432be",
          "body": "UI additions:\n- Screenshot button: Alt+Click takes pixel-perfect HiFi screenshot\n  via daemon (tooltip updated with new shortcut)\n- Demo button: pencil icon between Record and Settings\n  - Click to start demo (prompts for title)\n  - While active: click adds screenshot, shows section count\n\nWS server\n[…]\nreenshotCommand added to SweetlinkCommand union\n- Demo state fields added to DevBarState (demoActive, demoTitle, demoSectionCount)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(devbar): HiFi screenshot via Alt+Click, demo button in toolbar",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T17:19:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e0e60579270f1cdd649664a16b6abecfa5b579eb",
          "body": "Builds Markdown demo documents step-by-step as agents work.\nEach command appends a section with embedded outputs and screenshots.\nThe result is a reproducible tutorial/proof document.\n\nNew module (daemon/demo.ts):\n- initDemo(title): Start new document with git metadata\n- addNote(text): Append prose \n[…]\nFirst, run the tests:\n  ```bash\n  $ pnpm test -- --grep search\n  ✓ 3 tests passed\n  ```\n  ![Search results](demo-screenshot-1.png)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): demo document builder (Showboat-inspired)",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T16:54:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6cc08bd7a87e9fd55f8f510f8fb3f5f1b645062f",
          "body": "… new)\n\nAddresses TST1 audit finding — 3 critical daemon modules now have tests.\n\nerrorPatterns.test.ts (49 tests):\n  All 10 language categories (JS, Python, Go, Java, Rust, Ruby, PHP,\n  C#, Elixir, generic), clean output, multi-line, result shape\n\nsummary.test.ts (25 tests):\n  Markdown structure, g\n[…]\nntical/different buffers, threshold controls, different lengths,\n  empty buffers, result shape\n\n86 test files, 2296 tests passing.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(sweetlink): add tests for errorPatterns, summary, visualDiff (92…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T05:39:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7bdfd3d4d113a00cce0722e36f95c710e1e01f75",
          "body": "Fixes two issues from hook feedback:\n\n1. report --serve: Now binds to 0.0.0.0 (all interfaces) instead of\n   loopback. Prints both local and network URLs with LAN IP auto-detection.\n   Other devices on the network can now access the served viewer.\n\n2. Viewer Copy Report: Falls back to document.execC\n[…]\n.clipboard is unavailable (file:// contexts, non-HTTPS).\n   The downloaded standalone viewer now works offline for clipboard copy.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(sweetlink): bind --serve to 0.0.0.0 + clipboard fallback for file://",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T05:34:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8e6d86f8b1e1c89ce991c5f15a00f8199917fd3c",
          "body": "…e buttons\n\nPlatform-agnostic session sharing that works with any tool:\n\nCLI `report` command:\n- `sweetlink report` — prints SUMMARY.md to stdout (pipe anywhere)\n- `sweetlink report --clipboard` — copies to clipboard (pbcopy/xclip)\n- `sweetlink report --serve` — serves viewer.html on temporary local\n[…]\nThe summary markdown is generated at viewer build time and embedded\nin the HTML as a JS variable, so clipboard copy works offline.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): universal sharing — CLI report command + viewer shar…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T05:31:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "52445db1736033949e135d014d99568509c5b988",
          "body": "Fixes leaked blank tab and stale state when record-stop fails:\n\n- Handle both `record-stop-response` and `record-stop` message types\n  (server sends errors with the original type, not the -response suffix)\n- cleanupPendingWindow() helper closes blank tab + nulls state\n- On failure: close blank tab, \n[…]\n blank tab + resets state\n- record-stop error type: closes blank tab + resets state\n- record-stop with no pending window: no crash\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(devbar): clean up blank tab on record-stop failure + test coverage",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T05:10:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d917d4f156b1b478ad61608c470fe7599dd84724",
          "body": "Fixes three issues from hook feedback:\n\n1. Popup blocker: window.open() was called from async WS handler,\n   outside the original click gesture. Now opens window synchronously\n   on stop-click (about:blank), then navigates to viewerUrl when the\n   WS response arrives. Falls back to closing the blank\n[…]\nusers need offline access.\n\n3. New state field: pendingViewerWindow tracks the pre-opened window\n   between click and WS response.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(devbar): prevent popup blocker on viewer open, fix stale URL",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T05:06:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "838df7a478cfcf70585d77aa3bdb006f2f7cb043",
          "body": "The daemon now serves viewer.html via HTTP GET, so the browser can\nopen it directly. When recording stops from the devbar UI, the viewer\nauto-opens in a new tab.\n\nDaemon server:\n- GET /viewer/{sessionId}: Serves viewer.html (no auth, localhost only)\n- GET /viewers: Lists available sessions as JSON\n-\n[…]\nClick re-open\n\nFlow: Devbar button → WS → sweetlink server → daemon HTTP →\n  record-stop → viewerUrl → WS response → window.open()\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): serve viewer via daemon HTTP + auto-open from devbar",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T05:03:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6be678af9e6bcf09635077a77e03fa5774b1b56a",
          "body": "… overlays\n\nAbsorbs key features from ProofShot and Proof repos into Sweetlink v2.\n\nNew modules:\n- daemon/errorPatterns.ts: Multi-language server error detection (10+ languages)\n  JS/Node, Python, Ruby, Go, Java, Rust, PHP, C#, Elixir, generic patterns\n- daemon/summary.ts: SUMMARY.md report generato\n[…]\ne with emoji indicators\n\nSession manifest:\n- New fields: gitBranch, gitCommit\n- Auto-detected via git rev-parse at recording start\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): ProofShot/Proof features — error detection, summary,…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T04:44:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4fbda9ed55b4ada6df817fac7cadcc4612d91548",
          "body": "The viewer now shows a \"Back to app\" link in the header that navigates\nback to the recorded app URL. The link uses the target URL stored in\nthe session manifest.\n\nChanges:\n- session.ts: Add optional `url` field to SessionManifest\n- recording.ts: Store target URL during recording, include in manifest\n- viewer.ts: Render back link in header when URL is available\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): add back-to-app link in viewer header",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T04:29:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "873f645dc55803f4e780635e2b4cd4d2ad078df1",
          "body": "…ayer\n\nReplaces hardcoded colors with devbar design tokens across all\ngenerated HTML outputs:\n\nviewer.ts (session viewer):\n- CSS custom properties from devbar theme (--color-primary: #10b981, etc.)\n- Font: Departure Mono stack (with system monospace fallback)\n- Background: #0a0f1a (devbar dark bg), \n[…]\nemerald command text, card background\n- ANSI colors: emerald green, devbar red/amber\n- Typography: Departure Mono stack, 0.6875rem\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: apply devbar design system to viewer, annotations, terminal pl…",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T04:26:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "81425d2bb7bc4ff9a9fa0b761d25802141323b7a",
          "body": "Addressed all findings from thorough documentation audit:\n\nsweetlink/README.md:\n- Add 14 missing CLI commands/flags: wait, status, cleanup, --app,\n  --force-ws, --no-wait, --wait-timeout, --width, --height, --hifi,\n  --responsive, network --failed/--last\n- Add Schema/Outline/A11y/Vitals command sect\n[…]\nf command to CLI reference\n- Add --headed flag to daemon start\n- Add wait, status, vitals, a11y, schema, outline, cleanup commands\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: comprehensive documentation update from full audit",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T04:04:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7a274458c4063a0e6bf6c9988d854a5553e103b9",
          "body": "Multi-instance:\n- Daemon state files scoped by app port: daemon-3000.json, daemon-5173.json\n- Lock files also scoped: daemon-3000.lock, daemon-5173.lock\n- Two apps in same monorepo can run separate daemons simultaneously\n- CLI --url determines which daemon to start/connect to\n\nVite plugin auto-start\n[…]\n, concurrently, manual lifecycle\n- Multi-app monorepo setup: separate daemons per port\n- CLI quick reference for daemon management\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sweetlink): multi-instance daemon support + Vite auto-start",
          "author_name": "Yury Tsukerman",
          "author_login": "ytspar",
          "committed_at": "2026-03-26T04:00:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 33,
      "commits_last_year": 266,
      "latest_release_at": "2026-07-21T14:38:05Z",
      "latest_release_tag": "sweetlink-v1.27.0",
      "releases_from_tags": false,
      "days_since_last_push": 8,
      "active_weeks_last_year": 19,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 4.8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@ytspar/devbar",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "development",
            "debug",
            "devbar",
            "sweetlink",
            "vanilla-js"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@ytspar/devbar",
          "is_deprecated": false,
          "latest_version": "1.18.3",
          "repository_url": "https://github.com/ytspar/devbar",
          "versions_count": 150,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 5712,
          "first_published_at": "2026-01-29T05:12:41.371000Z",
          "latest_published_at": "2026-07-17T19:10:43.683000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 12
        },
        {
          "name": "@ytspar/sweetlink",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "autonomous-development",
            "ai-agents",
            "screenshot",
            "websocket",
            "chrome-devtools-protocol",
            "development-tools",
            "debugging",
            "vanilla-js"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@ytspar/sweetlink",
          "is_deprecated": false,
          "latest_version": "1.27.1",
          "repository_url": "https://github.com/ytspar/devbar",
          "versions_count": 141,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 11733,
          "first_published_at": "2026-01-29T05:12:31.174000Z",
          "latest_published_at": "2026-07-28T12:55:34.332000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 1
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": true,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "packages/devbar/tsconfig.json",
        "packages/playground/tsconfig.json",
        "packages/sweetlink/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 163647,
      "source_files_sampled": 271,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7449
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 9,
        "malicious_count": 0,
        "assessed_package": "npm:@ytspar/devbar@1.18.3",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@ytspar/sweetlink",
          "manifest": "packages/devbar/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:^"
        },
        {
          "name": "axe-core",
          "manifest": "packages/devbar/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.10.2"
        },
        {
          "name": "html2canvas-pro",
          "manifest": "packages/devbar/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.0"
        },
        {
          "name": "@ytspar/devbar",
          "manifest": "packages/playground/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@ytspar/sweetlink",
          "manifest": "packages/playground/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "dotenv",
          "manifest": "packages/sweetlink/package.json",
          "ecosystem": "npm",
          "version_constraint": "^17.2.4"
        },
        {
          "name": "ws",
          "manifest": "packages/sweetlink/package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.18.3"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 34,
        "open_issues": 2,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "ytspar",
          "commits": 260,
          "avatar_url": "https://avatars.githubusercontent.com/u/365593?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "playground.yml",
        "release-notes-gate.yml",
        "release-please.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 2,
            "reason": "5 out of 23 merged PRs checked by a CI test -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/24 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "15 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "48cfa865e8c224fccf426d5bc3510d64a1487c25",
        "ran_at": "2026-07-30T01:21:27Z",
        "aggregate_score": 3.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T14:39:21Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-21T14:37:56Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 1,
          "created_at": "2026-01-29T16:53:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2,
          "created_at": "2026-02-11T16:29:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ytspar/devbar",
    "host": "github.com",
    "name": "devbar",
    "owner": "ytspar"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 55,
      "inputs": {
        "security": 46,
        "vitality": 82,
        "community": 36,
        "governance": 48,
        "engineering": 57
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 82,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "commits_last_year": 266,
              "human_commit_share": 0.94,
              "days_since_last_push": 8,
              "active_weeks_last_year": 19
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 8 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "19/52 weeks with commits",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "266 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 266
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 33,
              "latest_release_tag": "sweetlink-v1.27.0",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 4.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "33 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 33
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~4.8 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 4.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 8,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 8 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 36,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "good",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 71,
            "inputs": {
              "packages": [
                "@ytspar/devbar",
                "@ytspar/sweetlink"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 17445
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "17,445 downloads/month across npm",
                "points": 56.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 17445,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 48,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "merged_prs": 34,
              "open_issues": 2,
              "closed_issues": 0,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "34/35 decided PRs merged",
                "points": 37.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 34,
                      "decided": 35
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/24 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 54,
            "inputs": {
              "followers": 36,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "ytspar",
              "public_repos": 20,
              "account_age_days": 5826
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "36 followers of ytspar",
                "points": 11.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 36,
                      "login": "ytspar"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "20 public repos, account ~15 yr old",
                "points": 21.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 20
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@ytspar/devbar",
                "@ytspar/sweetlink"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 1
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "2 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 2,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 1 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "150 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 150
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 57,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "5 out of 23 merged PRs checked by a CI test -- score normalized to 2",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 46,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 32,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "5 out of 23 merged PRs checked by a CI test -- score normalized to 2",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/24 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "15 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@ytspar/devbar@1.18.3 runtime dependency closure — what installing the published package pulls in — 9 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@ytspar/devbar@1.18.3",
                  "assessed": 9
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 9,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 9,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 83,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 0.83,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7449
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "78 of 94 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 78,
                      "sampled": 94
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "packages/devbar/tsconfig.json",
                "packages/playground/tsconfig.json",
                "packages/sweetlink/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.54,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "packages/devbar/tsconfig.json, packages/playground/tsconfig.json, packages/sweetlink/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/devbar/tsconfig.json, packages/playground/tsconfig.json, packages/sweetlink/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "54 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 54,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 163647,
              "source_files_sampled": 271,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/271 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 271,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T01:21:40.151954Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/y/ytspar/devbar.svg",
  "full_name": "ytspar/devbar",
  "license_state": "standard",
  "license_spdx": "MIT"
}